last executing test programs: 7.152634366s ago: executing program 2 (id=2325): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x38}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r2, r0, 0xf, 0x20}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d00000000000000000000008500000005", @ANYRES32=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r4) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 6.580385538s ago: executing program 1 (id=2327): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x7, 0x0, 0x200, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x1ff}, 0x1200, 0x7, 0x0, 0x2, 0x0, 0x7, 0xfffd}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, 0x0, 0x4044) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x8, 0x7, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.519449171s ago: executing program 1 (id=2331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x41, 0x0, 0xffffe531}, {0x6}]}) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) 5.457918702s ago: executing program 2 (id=2333): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8ed9e90c1d4f2726, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x3, 0x6, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d80000001e0081124e81f782db4cb9040a1d080006007c095dd2086518000a800de7ffff02600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 5.250853036s ago: executing program 2 (id=2337): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d88a8", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xff07}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000033c0)={r4, 0xe0, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000003140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f00000031c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000003200), &(0x7f0000003240), 0x8, 0x84, 0x8, 0x8, &(0x7f0000003280)}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003400), 0x4) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xa94, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000035c0)=@o_path={&(0x7f0000003580)='./file0\x00', 0x0, 0x4000, r4}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xd28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003680)={{0x1, 0xffffffffffffffff}, &(0x7f0000003600), &(0x7f0000003640)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003700)={0x11, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}, [@generic={0x8, 0x4, 0x4, 0x3ff, 0x58}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xbd2}]}, &(0x7f0000000080)='syzkaller\x00', 0x1000, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x2, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000003440)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000036c0)=[0x1, r7, r8, r9, r10, r1], 0x0, 0x10, 0x8000}, 0x94) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.217467487s ago: executing program 1 (id=2339): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3c, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102033208000300000000000003000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) 4.977783692s ago: executing program 1 (id=2341): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x7, 0x0, 0x200, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x1ff}, 0x1200, 0x7, 0x0, 0x2, 0x0, 0x7, 0xfffd}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, 0x0, 0x4044) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x8, 0x7, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.277395507s ago: executing program 0 (id=2343): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = socket$kcm(0x21, 0x2, 0x2) close(r2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40c0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006110740000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1000000}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0e000000010000005f0a00000100000000000000", @ANYRES32, @ANYBLOB="0100000c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000100"/28], 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={0xffffffffffffffff, r5, 0x4, r5}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='.&**\x00') socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r4}, &(0x7f0000001e40), &(0x7f0000001e80)=r6}, 0x20) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff, 0xa00}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 4.276297957s ago: executing program 2 (id=2344): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r0, 0x0, 0x1, 0x5, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r2, r0, 0xf, 0x20, 0x0, @void, @void, @void, @value, r4}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d00000000000000000000008500000005", @ANYRES32=r6], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r5) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 4.015565643s ago: executing program 0 (id=2347): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8ed9e90c1d4f2726, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x3, 0x6, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d80000001e0081124e81f782db4cb9040a1d080006007c095dd2086518000a800de7ffff02600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 3.855284506s ago: executing program 4 (id=2348): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8917, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000003a00000000000000000000007f"], 0xfdef) 3.792237128s ago: executing program 3 (id=2349): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000640)="0c5e9b837d8d217b2054d57772a62a5464d92df5ab30d119d1566d4087e8402dd227b757f42cffbbd127b60a99aa4fa7f1bc37234757f76aeec77776179c3ebda887912848e78d3fdba7210a610b88a53e0a4f8d4a7548e143361a254b42625d28ea674f25c2fcb776004b74ca2b6d846492113fb62d7350a03d85713fed774f89a002fe21b063fd0495173c2a9c0467e113cfdbbe8720a95407daa48159f6ec23712c37923958f99e0d669a1d67c787cc8f2bb96c6004842d2157e8c44fda93d1474d7a47a75d70cdbb70c0", 0xcc}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="cb35e8c6019c3afb905460792304c61c12cf81b2982daffb4c7c85d89e5eb887769543f827a69dff242bf73a368e32edd2e7b53a45b67ed260cee71a6e1e1233a5e8fc8544cc5c539338f45c794d0ec931d588fae9ce3fccd7223efe070d2489e6ac745e8a190ab965531c941e1ebafbb1317e073b2a53ab93a97eb6b9975281e9e83fa01c4b58f46aa59c8e8bdeecc08986655f0b4b8b", 0x97}, {&(0x7f0000001bc0)="437e75d6c470d0d151b9dfc7a417107abcc15787f6ddfb13d6123dc2fc754516c5c1945a9dac9a9609c0bcbce92104dc2d8a770ab7438b233aa5d748279fd9c738cb58ff6fc8612a4bd11364b92a728c303b1e9c5b1e5ba6ad6c932317482a9b5bddf6fcf8af7305896597abde2398bdeb146c2231415ceab8616dbd8908ad07426edc908528240d89386758c0f5035ac70e9712c02405532f8a58e72e8c", 0x9e}, {&(0x7f0000001c80)="39ecd58ce4db52854e599aeec5ed4294246f3822d3d1ed048b719ac179c68b78e50a397773ceec7e8db9e769fd0008", 0x2f}], 0x5, &(0x7f00000028c0)=[{0xe0, 0x10e, 0x1, "ee08b9b40628ab9651cd26059be9d1568a434f9e17ba69e3b57a85e02f469e0f36e0964a6b31e488bd9099811fa67d6e76718443f544f9df975f56dac1fae6cbecc62ba4cdd57052a0dcc9390b86ad9f38682905ded93818d4f298ccd3f7ce138f105ec0cb63e6cee26f73654a246c67891e8164f432ac8306d435fce290fe9e38674cfce7404cf00a149e060cddc4befd2a41a7c1cce5418f9a405cc51641d05c74e677f05c02079c3e948f6d4798b941e402107a25e61774ca65462e84d340bd94425cacb415e828813d49a6b2c4"}, {0x48, 0x10f, 0x1000, "257974436758c9e8c271ae9d3398d03589a436d408e412a177138874bc108cad7c804ed6657f38f01130b28ef4eae9b5f9"}, {0xc8, 0x10e, 0x9, "43581095e12c6ff97a97cd87066f7b5fe6104193774107c2148a0f21a2535f71bc61c0d36ef533624ac8f7d29d9033bfccdaf37b49f91dba9cd9cbb7156896e9192b55ae4444fe206d24e6b7bec6423618dd8480b25bb81867e154ea0854fc4b7129588bb0cbc8f53691ce10df01693df1c62710d179d6dcce56f05510e64df0c5e7a6d6a5e2e4575f081f4ca00dc9b69c5d662a0650bfa4babdb4305404da1d5e6e6a9a40d91e86bd9e9e0968529811ceb9f2"}], 0x1f0}, 0x8840) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$kcm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000009c0)}, 0x40) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r0, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pimreg\x00', 0x1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x7, 0xeffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="00000f0000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.732607749s ago: executing program 4 (id=2350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x41, 0x0, 0xffffe531}, {0x6}]}) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) 3.598767392s ago: executing program 3 (id=2351): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1ff}, 0x0, 0x10, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@generic={0x25, "0100000000000000aed3a1cfe696346585c6f323aa1d0d73ad589fbfdd2c9274aa85bdc12718f2a1f439a55fcbe56fa514f165984e09fb7317019c69b1a14013db732cacb677bb3b00f0070039cc33016d8a6a3d141050c92220a92133f836530d61dd080096e21ba8375477051a79403d257fb778b6b3e788b3c51c388a"}, 0x80, 0x0}, 0x8000) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x60020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xfff, 0x6}, 0xc800, 0x185, 0x9, 0x9, 0xb0, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0x1, 0x65, 0x0, 0x0, 0x3, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001740)=ANY=[@ANYRES32, @ANYRES32=r4], 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000280)=')\x00'}, 0x30) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xbc}, {0x0}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {0x0}, {0x0}], 0x9}, 0x40012100) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) 3.276639669s ago: executing program 0 (id=2352): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x4) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 1.701444593s ago: executing program 4 (id=2353): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000015002020207b1af8ff00000000bfa118000000000007010000f8ffffffb702000008000000b70300000500000085000000710000009500"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2f}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0xb0ff}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.678632044s ago: executing program 2 (id=2354): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000018000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='c$'], 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x6d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000980)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200026a3c806bb49ca39c0000000000483a23e1e6939edf85000000730000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, 0x94) r6 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="257fd3cbb7ba7feb35295a62cd27", 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r9 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r10) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1.677626813s ago: executing program 0 (id=2364): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x4) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 1.631283645s ago: executing program 1 (id=2355): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000018000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='c$'], 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x6d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000980)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200026a3c806bb49ca39c0000000000483a23e1e6939edf85000000730000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, 0x94) r6 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="257fd3cbb7ba7feb35295a62cd27", 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r9 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r10) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1.520002547s ago: executing program 3 (id=2356): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) 1.40253429s ago: executing program 4 (id=2357): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xcb, 0x4, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000300007e180000000000000000000009000000009500000200000000beaa0000000000009500000000000000a2ce73f6bb19c5601f673f533c0c743bf1a366826f82be4a42a53eaeb20819bbaacc0b8d34d5861ca8d4dd875b4f9584fbf10c67cccd279af342cb6f464f73267d89c2eb1c4efa82557fedd4cf559ca32fd0745e51ce5b77bd65922bcf4400d0a2c41927a1be47d499ec842b63e354c99570bd77b09bf75547a2bc11fbfbb7c4d4ee192418553455d031df53ce25873f4accbea88793e0f2ea4a4af66d"], 0x0, 0x4}, 0x94) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x94) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x7d, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x4040000) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c"], 0x30}, 0x890) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000300), &(0x7f0000000340)=r9}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r9, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x5, 0x0, r10, 0x0, '\x00', 0x0, r9, 0x2, 0x2, 0x3}, 0x50) socket$kcm(0x21, 0x2, 0x2) 1.3890807s ago: executing program 0 (id=2358): r0 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x1, 0x0, 0x0, 0x6, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x420, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x822a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x10140) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2b) openat$ppp(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000520033d487277b9b108b4ab50a"], 0xfe33) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 1.236227843s ago: executing program 3 (id=2359): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 959.934529ms ago: executing program 4 (id=2360): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x3f00, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x1, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x4ebfe821e9a628ca}, 0x40000162) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000bc0)={&(0x7f0000000940)=@ll={0x11, 0xf8, 0x0, 0x1, 0xfd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000b40)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}], 0x60}, 0x1) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xff) 949.710549ms ago: executing program 3 (id=2361): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x4, 0xd2cf, 0x200, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x2b, 0x1, 0x401, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000007c0)="344ef9fd2a18895221828a931ffadafcf65fac2eb4a25f758b59add6ed9546db2fb07f01b43824c5842398c8575f3f30f99768090460dd3d224dbc9dd95264352cb67ded9d9b17b7bb977079e85a2ee045ed9d334f1c059a9caa82fa8a7e7555dbc705e7807653fe33cb2c239aca6eecd010f25ae581", 0x76}, {0x0}, {&(0x7f0000000980)}], 0x7, &(0x7f0000000ac0)="efecae1b80816c9e9e637679d884f76ecc691116b51508419b035cdcec1eec5c218072c44618a7dc4cfe28ffddb24d07554c09da2256c4759f57b66d26243a", 0x3f, 0x40c0}, 0x4000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xa, 0x2f, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @alu={0x4, 0x1, 0x5, 0x7, 0x5, 0x10, 0x10}, @exit, @map_idx_val={0x18, 0xd, 0x6, 0x0, 0xb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='syzkaller\x00', 0x8, 0x3b, &(0x7f0000000e40)=""/59, 0x41000, 0x14, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000ec0)={0x0, 0xb, 0x4, 0x8c8b}, 0x10, 0x0, r5, 0x1, 0x0, &(0x7f0000000f00)=[{0x5, 0x1, 0xf, 0x2}], 0x10, 0x401}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001100)={@fallback=r2, 0x2b, 0x0, 0x8, &(0x7f0000001000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0}, 0x40) r9 = socket$kcm(0x10, 0x2, 0x10) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r10, 0x400454d1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001140)={@cgroup=r10, r7, 0x2f, 0x2020, 0x0, @void, @void, @value, @void, r8}, 0x20) sendmsg$inet(r6, 0x0, 0x200048cc) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {{}, {0x95, 0x0, 0x300}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {}, {0x3, 0x3, 0x3, 0xa, 0x9}, {}, {}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x62, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 906.38801ms ago: executing program 1 (id=2362): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="0400000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000200000000f21b000000000000000000000000ef429ca491d8d22aba2d7a66ad4350952d0cbe124721b1945c6630776061c477112475c237aaa4e530dc40a8dd16700c82631c530e95c679c80e14eae431ca915c0a718d84c41bfa8653ae52c7a772adff80ba24fd9b30cfa1708b8bc4e6bfed9c6c9508e2b1190c3060908dc1129909169ff7afe13e2de5df56d92618c89504d0dd5727c4634dccaa1634e4f810e9374e632dadb5fda0ccf114debad23582cf54b81d876715b81d4a4cd6214b9e67ffe482fef2e68b2a0dccef3c42c1eb5434592d1c42de1c9e76da83552b76fae90784b23cd90b2dbaeb7d5d4085708cb63f631fa6fa0f1c5dafa23606ffc899c8538a9ea3cf36676d6cc3419ce1689c6b26550c37b47f00e515dd4e8d9b14b9"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001700)={r0, 0x58, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x2, 0x6, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000000001000520000001d0000001100006fe8eed34c1aec0ab0d1da1d5b83655cad7068fd5dba37b54adbb46b8d492bf2667ecc5376a845dfb5be8c95ebba5445fad658ec1892df68aa3efd1def4ca519f9d0b7121a4815bb0dc75d328a973a5e96d8ec24e01063", @ANYRES32=r0, @ANYBLOB="000000000000000085000000160000009500000000000000"], &(0x7f0000001540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1c, '\x00', r1}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800e6776504e47dc0ad00004c0000000a0000000e0000000000000205000000070000000000000700000000020000000200000604000000010000000200000000000000000b03000000060000000000000b0000000000305f2e00612e003e00"/110], &(0x7f00000004c0)=""/217, 0x6e, 0xd9, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="01040000000000f100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000300"/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xd, &(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x14, &(0x7f0000000040)={0x1}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) write$cgroup_subtree(r9, &(0x7f0000000000), 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x4a, &(0x7f00000000c0)=r10, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)='%-5lx \x00'}, 0x20) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x6, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000280)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fbfffffefff}, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x4, 0xa2104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x131}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x200000007ff}, 0x10022, 0xac5f, 0x0, 0x0, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) 733.590874ms ago: executing program 2 (id=2363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x41, 0x0, 0xffffe531}, {0x6}]}) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) 594.940887ms ago: executing program 4 (id=2365): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r0, 0x0, 0x1, 0x5, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r2, r0, 0xf, 0x20, 0x0, @void, @void, @void, @value, r4}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d00000000000000000000008500000005", @ANYRES32=r6], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r5) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 594.01µs ago: executing program 0 (id=2366): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) 0s ago: executing program 3 (id=2367): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x7, 0x0, 0x200, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x1ff}, 0x1200, 0x7, 0x0, 0x2, 0x0, 0x7, 0xfffd}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, 0x0, 0x4044) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x8, 0x7, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.1.686'. [ 217.517386][ T6478] netlink: 6328 bytes leftover after parsing attributes in process `syz.1.686'. [ 217.548420][ T6478] netlink: 60 bytes leftover after parsing attributes in process `syz.1.686'. [ 217.562072][ T6478] netlink: 60 bytes leftover after parsing attributes in process `syz.1.686'. [ 217.579773][ T6478] netlink: 60 bytes leftover after parsing attributes in process `syz.1.686'. [ 217.590438][ T6478] netlink: 60 bytes leftover after parsing attributes in process `syz.1.686'. [ 219.300845][ T6498] netlink: 132 bytes leftover after parsing attributes in process `syz.3.693'. [ 221.281934][ T6537] netlink: 'syz.4.708': attribute type 30 has an invalid length. [ 221.841499][ T6532] netlink: 'syz.2.706': attribute type 21 has an invalid length. [ 221.857605][ T6532] netlink: 156 bytes leftover after parsing attributes in process `syz.2.706'. [ 221.881642][ T6514] netlink: 'syz.1.699': attribute type 21 has an invalid length. [ 221.898318][ T6514] netlink: 'syz.1.699': attribute type 1 has an invalid length. [ 221.922648][ T6514] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.699'. [ 222.077142][ T6537] device syzkaller0 entered promiscuous mode [ 222.183478][ T6552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.710'. [ 224.678943][ T6545] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.710'. [ 224.689093][ T6545] netlink: 6328 bytes leftover after parsing attributes in process `syz.2.710'. [ 224.721205][ T6552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.710'. [ 224.730647][ T6564] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.714'. [ 224.751511][ T6565] netlink: 'syz.3.714': attribute type 10 has an invalid length. [ 224.770639][ T6565] netlink: 156 bytes leftover after parsing attributes in process `syz.3.714'. [ 225.045750][ T6575] FAULT_INJECTION: forcing a failure. [ 225.045750][ T6575] name failslab, interval 1, probability 0, space 0, times 0 [ 225.152025][ T6575] CPU: 1 PID: 6575 Comm: syz.4.716 Not tainted syzkaller #0 [ 225.159413][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 225.169518][ T6575] Call Trace: [ 225.172836][ T6575] [ 225.175810][ T6575] dump_stack_lvl+0x188/0x24e [ 225.180538][ T6575] ? show_regs_print_info+0x12/0x12 [ 225.185777][ T6575] ? load_image+0x410/0x410 [ 225.190323][ T6575] ? __might_sleep+0xd0/0xd0 [ 225.194956][ T6575] ? __lock_acquire+0x7bd0/0x7bd0 [ 225.200018][ T6575] should_fail_ex+0x390/0x4c0 [ 225.204734][ T6575] should_failslab+0x5/0x20 [ 225.209276][ T6575] slab_pre_alloc_hook+0x59/0x300 [ 225.214359][ T6575] ? ___sys_sendmsg+0x2a2/0x360 [ 225.219252][ T6575] ? __se_sys_sendmsg+0x1c3/0x2b0 [ 225.224314][ T6575] ? do_syscall_64+0x4c/0xa0 [ 225.228941][ T6575] kmem_cache_alloc_node+0x5a/0x310 [ 225.234170][ T6575] ? __alloc_skb+0xf9/0x7d0 [ 225.238702][ T6575] __alloc_skb+0xf9/0x7d0 [ 225.243058][ T6575] netlink_dump+0x1e1/0xcd0 [ 225.247599][ T6575] ? netlink_lookup+0x200/0x200 [ 225.252479][ T6575] ? memcpy+0x3c/0x60 [ 225.256526][ T6575] ? genl_start+0x2d7/0x490 [ 225.261063][ T6575] __netlink_dump_start+0x52c/0x6f0 [ 225.266293][ T6575] genl_family_rcv_msg_dumpit+0x228/0x3c0 [ 225.272049][ T6575] ? genl_rcv_msg+0x790/0x790 [ 225.276760][ T6575] ? __mutex_lock+0x1ab/0xae0 [ 225.281469][ T6575] ? genl_family_rcv_msg_doit+0x350/0x350 [ 225.287214][ T6575] ? genl_start+0x490/0x490 [ 225.291746][ T6575] ? genl_lock_dumpit+0x90/0x90 [ 225.296633][ T6575] ? mutex_lock_nested+0x10/0x10 [ 225.301601][ T6575] ? __dev_queue_xmit+0x1d84/0x3810 [ 225.306832][ T6575] ? genl_get_cmd+0xe4/0x8b0 [ 225.311454][ T6575] ? memcpy+0x3c/0x60 [ 225.315476][ T6575] ? genl_get_cmd+0x518/0x8b0 [ 225.320187][ T6575] genl_rcv_msg+0x5c8/0x790 [ 225.324731][ T6575] ? genl_bind+0x360/0x360 [ 225.329182][ T6575] ? tipc_nametbl_stop+0x12e0/0x12e0 [ 225.334503][ T6575] netlink_rcv_skb+0x1ef/0x440 [ 225.339299][ T6575] ? genl_bind+0x360/0x360 [ 225.343749][ T6575] ? netlink_ack+0x1160/0x1160 [ 225.348558][ T6575] ? down_read+0x1a8/0x2d0 [ 225.353012][ T6575] genl_rcv+0x24/0x40 [ 225.357053][ T6575] netlink_unicast+0x7ad/0x920 [ 225.361861][ T6575] netlink_sendmsg+0x8ad/0xbd0 [ 225.366667][ T6575] ? netlink_getsockopt+0x550/0x550 [ 225.371901][ T6575] ? aa_sock_msg_perm+0x94/0x150 [ 225.376871][ T6575] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 225.382181][ T6575] ? security_socket_sendmsg+0x7c/0xa0 [ 225.387664][ T6575] ? netlink_getsockopt+0x550/0x550 [ 225.392910][ T6575] ____sys_sendmsg+0x5ed/0x9a0 [ 225.397793][ T6575] ? __sys_sendmsg_sock+0x30/0x30 [ 225.402854][ T6575] ? __import_iovec+0x306/0x510 [ 225.407764][ T6575] ? import_iovec+0x6f/0xa0 [ 225.412316][ T6575] ___sys_sendmsg+0x2a2/0x360 [ 225.417042][ T6575] ? __sys_sendmsg+0x2a0/0x2a0 [ 225.421856][ T6575] ? __lock_acquire+0x7bd0/0x7bd0 [ 225.426931][ T6575] __se_sys_sendmsg+0x1c3/0x2b0 [ 225.431859][ T6575] ? __x64_sys_sendmsg+0x80/0x80 [ 225.436894][ T6575] ? lockdep_hardirqs_on+0x94/0x140 [ 225.442129][ T6575] do_syscall_64+0x4c/0xa0 [ 225.446569][ T6575] ? clear_bhb_loop+0x60/0xb0 [ 225.451268][ T6575] ? clear_bhb_loop+0x60/0xb0 [ 225.455968][ T6575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.461901][ T6575] RIP: 0033:0x7fc1e719de59 [ 225.466344][ T6575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.485972][ T6575] RSP: 002b:00007fc1e7f92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.494446][ T6575] RAX: ffffffffffffffda RBX: 00007fc1e7426090 RCX: 00007fc1e719de59 [ 225.502532][ T6575] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 225.510528][ T6575] RBP: 00007fc1e7f92090 R08: 0000000000000000 R09: 0000000000000000 [ 225.518530][ T6575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.526555][ T6575] R13: 00007fc1e7426128 R14: 00007fc1e7426090 R15: 00007ffcdd374828 [ 225.534571][ T6575] [ 226.652156][ T6595] delete_channel: no stack [ 226.817225][ T6600] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.726'. [ 226.866741][ T6600] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.726'. [ 226.906189][ T6603] netlink: 14 bytes leftover after parsing attributes in process `syz.1.727'. [ 226.943532][ T6604] netlink: 60 bytes leftover after parsing attributes in process `syz.3.726'. [ 227.148061][ T6603] device hsr_slave_0 left promiscuous mode [ 227.176203][ T6603] device hsr_slave_1 left promiscuous mode [ 227.351435][ T6604] netlink: 60 bytes leftover after parsing attributes in process `syz.3.726'. [ 227.526683][ T6600] netlink: 60 bytes leftover after parsing attributes in process `syz.3.726'. [ 227.671138][ T6610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.726'. [ 227.984623][ T6633] netlink: 'syz.0.735': attribute type 10 has an invalid length. [ 228.120508][ T6633] team0: Device vxcan1 is of different type [ 229.888212][ T6656] netlink: 'syz.0.744': attribute type 10 has an invalid length. [ 230.004325][ T6658] netlink: 'syz.0.745': attribute type 10 has an invalid length. [ 230.220349][ T6662] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.747'. [ 230.621099][ T6669] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.751'. [ 230.669484][ T6669] netlink: zone id is out of range [ 230.832181][ T6669] netlink: zone id is out of range [ 230.843508][ T6669] netlink: get zone limit has 8 unknown bytes [ 230.948787][ T6678] netlink: 'syz.0.753': attribute type 21 has an invalid length. [ 230.978549][ T6678] netlink: 'syz.0.753': attribute type 1 has an invalid length. [ 231.033934][ T6678] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.753'. [ 231.929832][ T6692] netlink: 'syz.1.760': attribute type 10 has an invalid length. [ 231.972154][ T6692] netlink: 40 bytes leftover after parsing attributes in process `syz.1.760'. [ 232.064803][ T6692] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 232.388676][ T6694] netlink: 'syz.0.761': attribute type 10 has an invalid length. [ 232.419937][ T6694] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 233.087770][ T5690] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 233.487681][ T6718] netlink: 'syz.1.768': attribute type 10 has an invalid length. [ 233.825252][ T6732] netlink: 'syz.2.771': attribute type 10 has an invalid length. [ 233.949500][ T6732] team0: Device vxcan1 is of different type [ 234.115144][ T6741] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.777'. [ 236.069628][ T6784] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.791'. [ 238.258281][ T6841] netlink: 132 bytes leftover after parsing attributes in process `syz.3.810'. [ 241.394740][ T6859] netlink: 'syz.2.818': attribute type 10 has an invalid length. [ 241.412350][ T6867] netlink: 'syz.0.830': attribute type 2 has an invalid length. [ 241.631080][ T6891] netlink: 'syz.4.825': attribute type 10 has an invalid length. [ 241.684199][ T6891] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 241.947775][ T6906] netlink: 128 bytes leftover after parsing attributes in process `syz.4.832'. [ 242.019056][ T6906] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 242.140174][ T6906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.216289][ T6926] netlink: 'syz.4.836': attribute type 21 has an invalid length. [ 243.244283][ T6926] netlink: 'syz.4.836': attribute type 11 has an invalid length. [ 244.379210][ T6942] netlink: 'syz.2.839': attribute type 29 has an invalid length. [ 244.484683][ T6942] netlink: 'syz.2.839': attribute type 29 has an invalid length. [ 244.502962][ T6946] netlink: 'syz.2.839': attribute type 29 has an invalid length. [ 244.539504][ T6937] netlink: 'syz.2.839': attribute type 29 has an invalid length. [ 244.574863][ T6937] netlink: 'syz.2.839': attribute type 29 has an invalid length. [ 247.570156][ T7001] netlink: 'syz.1.857': attribute type 2 has an invalid length. [ 247.592888][ T7001] netlink: 'syz.1.857': attribute type 3 has an invalid length. [ 247.600642][ T7001] netlink: 132 bytes leftover after parsing attributes in process `syz.1.857'. [ 247.922690][ T7004] netlink: 463 bytes leftover after parsing attributes in process `syz.3.861'. [ 248.902248][ T7014] device veth0_to_bridge left promiscuous mode [ 248.909492][ T7014] bridge0: port 3(veth0_to_bridge) entered disabled state [ 248.958090][ T7014] device bridge_slave_1 left promiscuous mode [ 248.986485][ T7014] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.038040][ T7014] device bridge_slave_0 left promiscuous mode [ 249.086405][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.389283][ T7022] netlink: 132 bytes leftover after parsing attributes in process `syz.4.870'. [ 249.404943][ T7025] IPv6: Can't replace route, no match found [ 249.432166][ T7026] tipc: Started in network mode [ 249.437560][ T7026] tipc: Node identity 9215a268, cluster identity 4711 [ 249.472246][ T7026] tipc: Node number set to 2450891368 [ 250.503709][ T7047] netlink: 'syz.0.880': attribute type 2 has an invalid length. [ 250.584237][ T7047] netlink: 'syz.0.880': attribute type 3 has an invalid length. [ 250.672012][ T7047] netlink: 132 bytes leftover after parsing attributes in process `syz.0.880'. [ 250.979565][ T7063] netlink: 'syz.3.887': attribute type 21 has an invalid length. [ 251.018631][ T7063] netlink: 'syz.3.887': attribute type 11 has an invalid length. [ 251.912734][ T7065] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.886'. [ 251.931808][ T7065] netlink: zone id is out of range [ 251.937955][ T7065] netlink: zone id is out of range [ 251.948689][ T7065] netlink: zone id is out of range [ 251.967645][ T7065] netlink: zone id is out of range [ 251.987232][ T7065] netlink: zone id is out of range [ 251.995085][ T7065] netlink: zone id is out of range [ 252.149647][ T7065] netlink: del zone limit has 4 unknown bytes [ 252.736298][ T7098] netlink: 'syz.3.895': attribute type 2 has an invalid length. [ 252.786481][ T7097] netlink: 463 bytes leftover after parsing attributes in process `syz.1.896'. [ 253.714854][ T7119] netlink: 'syz.2.904': attribute type 21 has an invalid length. [ 253.729539][ T7119] netlink: 'syz.2.904': attribute type 1 has an invalid length. [ 253.772884][ T7119] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.904'. [ 254.471154][ T7132] netlink: 'syz.3.907': attribute type 10 has an invalid length. [ 254.485136][ T7132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.907'. [ 254.521203][ T7132] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 254.757740][ T7140] IPv6: Can't replace route, no match found [ 254.974159][ T7147] netlink: 'syz.3.913': attribute type 10 has an invalid length. [ 255.732728][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.739159][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.895113][ T7171] netlink: 'syz.3.916': attribute type 2 has an invalid length. [ 255.925615][ T7171] netlink: 'syz.3.916': attribute type 3 has an invalid length. [ 255.955313][ T7171] netlink: 132 bytes leftover after parsing attributes in process `syz.3.916'. [ 256.879080][ T7178] netlink: 'syz.0.923': attribute type 1 has an invalid length. [ 257.120677][ T7182] netlink: 'syz.1.922': attribute type 4 has an invalid length. [ 257.135939][ T7182] netlink: 152 bytes leftover after parsing attributes in process `syz.1.922'. [ 257.149015][ T7182] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 257.181609][ T7189] netlink: 14 bytes leftover after parsing attributes in process `syz.4.927'. [ 257.427591][ T7189] team0: Port device bond0 removed [ 257.535083][ T7189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.652569][ T7189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.771083][ T7189] bond0 (unregistering): Released all slaves [ 259.038847][ T7216] delete_channel: no stack [ 259.675187][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 259.842747][ T7225] cgroup: fork rejected by pids controller in /syz4 [ 259.898460][ T7224] netlink: 'syz.1.940': attribute type 4 has an invalid length. [ 259.925573][ T7224] netlink: 152 bytes leftover after parsing attributes in process `syz.1.940'. [ 259.969653][ T7224] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 260.066654][ T7235] netlink: 132 bytes leftover after parsing attributes in process `syz.0.945'. [ 260.521199][ T7348] netlink: 'syz.1.959': attribute type 4 has an invalid length. [ 260.531820][ T7348] netlink: 152 bytes leftover after parsing attributes in process `syz.1.959'. [ 260.541170][ T7348] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 262.979097][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.988199][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.008235][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.017195][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.031548][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 263.042675][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 265.091992][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 265.640642][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.825391][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.964037][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.030014][ T7390] netlink: 'syz.1.965': attribute type 7 has an invalid length. [ 266.063204][ T7383] netlink: 'syz.0.963': attribute type 4 has an invalid length. [ 266.103277][ T7383] netlink: 152 bytes leftover after parsing attributes in process `syz.0.963'. [ 266.114744][ T7383] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 266.251688][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.581639][ T7375] chnl_net:caif_netlink_parms(): no params data found [ 266.862986][ T7375] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.907658][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.958881][ T7375] device bridge_slave_0 entered promiscuous mode [ 267.010478][ T7375] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.052923][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.098955][ T7375] device bridge_slave_1 entered promiscuous mode [ 267.172060][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 267.287017][ T7375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.337898][ T7375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.513525][ T7375] team0: Port device team_slave_0 added [ 267.534038][ T7375] team0: Port device team_slave_1 added [ 267.661116][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.711799][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.768130][ T7375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.980167][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.995007][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.062992][ T7375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.364759][ T7375] device hsr_slave_0 entered promiscuous mode [ 268.393716][ T7375] device hsr_slave_1 entered promiscuous mode [ 268.410346][ T7375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.430805][ T7375] Cannot create hsr debugfs directory [ 269.241933][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 271.321862][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 272.900114][ T7547] netlink: 'syz.1.1024': attribute type 29 has an invalid length. [ 272.995922][ T7547] netlink: 'syz.1.1024': attribute type 29 has an invalid length. [ 273.121519][ T7555] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1027'. [ 273.134780][ T7556] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1025'. [ 273.150852][ T7551] netlink: 'syz.1.1024': attribute type 29 has an invalid length. [ 273.444230][ T7564] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1028'. [ 273.644815][ T46] device hsr_slave_0 left promiscuous mode [ 273.679038][ T46] device hsr_slave_1 left promiscuous mode [ 273.693279][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.719225][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.763377][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.770863][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.939342][ T46] device veth1_macvtap left promiscuous mode [ 273.959815][ T46] device veth0_macvtap left promiscuous mode [ 275.122963][ T46] team0 (unregistering): Port device team_slave_1 removed [ 275.640417][ T7375] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 275.674984][ T7375] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 275.756731][ T7375] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 275.803360][ T7375] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 276.123816][ T7375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.219722][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.289233][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.326468][ T7375] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.356062][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.376406][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.407614][ T5690] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.414857][ T5690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.501179][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.529745][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.575728][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.619017][ T5690] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.626247][ T5690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.674751][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.694405][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.765043][ T7651] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 276.808142][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.843579][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.913410][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.941011][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.972944][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.024769][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.085103][ T7375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.122865][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.152160][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.172678][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.181265][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.384493][ T7670] C: renamed from team_slave_0 [ 277.409968][ T7670] netlink: 'syz.2.1069': attribute type 1 has an invalid length. [ 277.449795][ T7670] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1069'. [ 277.487657][ T7670] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 278.646496][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.692172][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.707319][ T7375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.843030][ T46] wlan1: Trigger new scan to find an IBSS to join [ 279.761515][ T7746] sctp: [Deprecated]: syz.0.1092 (pid 7746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.761515][ T7746] Use struct sctp_sack_info instead [ 280.108763][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.135729][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.224926][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.238483][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.257659][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.280830][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.305748][ T7375] device veth0_vlan entered promiscuous mode [ 280.353384][ T7375] device veth1_vlan entered promiscuous mode [ 280.449533][ T7375] device veth0_macvtap entered promiscuous mode [ 280.477653][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.509428][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.547421][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.593197][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.629569][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.650767][ T7375] device veth1_macvtap entered promiscuous mode [ 280.674348][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.717948][ T4279] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 280.723893][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.756931][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.773538][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.789576][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.802899][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.854521][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.892314][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.932626][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.973393][ T7375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.981910][ T5681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.000598][ T5681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.053801][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.085038][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.165543][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.181976][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.221335][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.245766][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.263034][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.292061][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.321242][ T7375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.342191][ T7786] netlink: 'syz.3.1102': attribute type 10 has an invalid length. [ 281.409206][ T7786] team0: Device wg1 is of different type [ 281.453705][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.470917][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.525159][ T7375] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.555425][ T7375] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.624140][ T7375] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.649997][ T7375] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.860566][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.881643][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.893388][ T5690] wlan1: Trigger new scan to find an IBSS to join [ 281.933324][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.961996][ T5690] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 281.984190][ T4279] Bluetooth: hci4: unexpected subevent 0x04 length: 150 > 11 [ 282.094296][ T5681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.112722][ T5681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.152266][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 282.585616][ T7823] device sit0 entered promiscuous mode [ 283.200804][ T7845] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1124'. [ 283.512840][ T7858] netlink: 'syz.0.1129': attribute type 2 has an invalid length. [ 283.532639][ T7858] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1129'. [ 283.831508][ T4279] Bluetooth: hci2: Malformed Event: 0x13 [ 284.962171][ T7901] sctp: [Deprecated]: syz.1.1144 (pid 7901) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.962171][ T7901] Use struct sctp_sack_info instead [ 285.362901][ T7921] syz.0.1153 (7921) used obsolete PPPIOCDETACH ioctl [ 285.789815][ T7933] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1160'. [ 285.914786][ T7940] netlink: 'syz.2.1162': attribute type 10 has an invalid length. [ 285.935807][ T7940] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1162'. [ 286.277995][ T7951] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1166'. [ 286.317877][ T7951] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1166'. [ 286.359498][ T7953] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1166'. [ 287.127267][ T7976] netlink: 'syz.3.1177': attribute type 10 has an invalid length. [ 287.179928][ T7976] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1177'. [ 287.675192][ T7997] device sit0 entered promiscuous mode [ 289.362216][ T8050] device sit0 entered promiscuous mode [ 289.866071][ T8073] C: renamed from team_slave_0 [ 289.911606][ T8073] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1222'. [ 290.226136][ T8089] netlink: 'syz.0.1229': attribute type 10 has an invalid length. [ 290.422492][ T8094] device sit0 entered promiscuous mode [ 290.497165][ T8099] netlink: 'syz.4.1233': attribute type 10 has an invalid length. [ 290.548646][ T8099] team0: Port device netdevsim0 added [ 291.485506][ T8139] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1255'. [ 291.749716][ T8142] netlink: 'syz.0.1256': attribute type 4 has an invalid length. [ 291.758254][ T8142] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1256'. [ 291.767998][ T8142] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 292.639119][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'. [ 293.769820][ T8181] netlink: 'syz.2.1269': attribute type 1 has an invalid length. [ 293.778121][ T8181] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1269'. [ 294.473340][ T8204] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1279'. [ 294.735480][ T8206] device sit0 entered promiscuous mode [ 294.919777][ T8216] netlink: 'syz.0.1282': attribute type 2 has an invalid length. [ 294.944266][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1280'. [ 296.355447][ T8230] netlink: 'syz.0.1288': attribute type 4 has an invalid length. [ 296.369895][ T8230] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1288'. [ 296.379670][ T8230] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 296.401967][ T8238] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1291'. [ 297.074052][ T8246] device sit0 left promiscuous mode [ 297.442422][ T8252] device sit0 entered promiscuous mode [ 298.524345][ T8271] netlink: 'syz.2.1306': attribute type 4 has an invalid length. [ 298.582810][ T8271] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1306'. [ 298.621480][ T8271] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 299.220041][ T8289] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1311'. [ 301.013947][ T8309] device sit0 left promiscuous mode [ 301.040259][ T8312] device sit0 entered promiscuous mode [ 301.117531][ T8315] C: renamed from team_slave_0 [ 301.134659][ T8315] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1322'. [ 302.450496][ T8344] netlink: 'syz.4.1333': attribute type 10 has an invalid length. [ 302.502358][ T8344] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1333'. [ 302.742698][ T8349] device sit0 left promiscuous mode [ 303.201706][ T8362] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1337'. [ 303.701662][ T8378] netlink: 'syz.0.1345': attribute type 10 has an invalid length. [ 303.750968][ T8378] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1345'. [ 304.255822][ T8395] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1351'. [ 304.867268][ T8399] netlink: 'syz.2.1352': attribute type 4 has an invalid length. [ 304.871180][ T8404] delete_channel: no stack [ 304.893539][ T8399] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1352'. [ 304.949006][ T8399] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 305.105951][ T8413] netlink: 'syz.0.1356': attribute type 10 has an invalid length. [ 305.124467][ T8413] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1356'. [ 306.009037][ T8440] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1366'. [ 306.215146][ T8447] netlink: 'syz.2.1371': attribute type 10 has an invalid length. [ 306.241203][ T8447] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1371'. [ 306.327489][ T8444] netlink: 'syz.3.1369': attribute type 4 has an invalid length. [ 306.377525][ T8444] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1369'. [ 306.412103][ T8444] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 307.574158][ T8483] netlink: 'syz.3.1383': attribute type 10 has an invalid length. [ 307.623890][ T8483] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1383'. [ 307.922568][ T8485] netlink: 'syz.1.1379': attribute type 17 has an invalid length. [ 307.990228][ T8485] netlink: 'syz.1.1379': attribute type 16 has an invalid length. [ 308.049356][ T8485] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1379'. [ 308.773220][ T8502] netlink: 'syz.0.1388': attribute type 4 has an invalid length. [ 308.781149][ T8502] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1388'. [ 308.858590][ T8502] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 308.882257][ T8509] netlink: 'syz.1.1390': attribute type 10 has an invalid length. [ 309.374610][ T8520] netlink: 'syz.0.1394': attribute type 7 has an invalid length. [ 309.392070][ T8520] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1394'. [ 310.505544][ T8553] netlink: 'syz.3.1404': attribute type 4 has an invalid length. [ 310.529854][ T8553] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1404'. [ 310.566604][ T8553] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 312.185336][ T8589] netlink: 'syz.3.1417': attribute type 3 has an invalid length. [ 312.283337][ T8585] device sit0 left promiscuous mode [ 312.293752][ T8589] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1417'. [ 312.691856][ T8593] device sit0 entered promiscuous mode [ 312.889757][ T8597] netlink: 'syz.4.1418': attribute type 4 has an invalid length. [ 313.002098][ T8597] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1418'. [ 313.829832][ T8597] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 314.156362][ T8617] netlink: 'syz.0.1423': attribute type 2 has an invalid length. [ 314.201069][ T8621] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1424'. [ 315.336686][ T8637] device sit0 left promiscuous mode [ 315.479368][ T8639] device sit0 entered promiscuous mode [ 315.687149][ T8647] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1432'. [ 316.033889][ T8653] device sit0 left promiscuous mode [ 316.441137][ T8658] device sit0 entered promiscuous mode [ 316.754226][ T8670] FAULT_INJECTION: forcing a failure. [ 316.754226][ T8670] name failslab, interval 1, probability 0, space 0, times 0 [ 316.779523][ T8670] CPU: 1 PID: 8670 Comm: syz.1.1439 Not tainted syzkaller #0 [ 316.786995][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.797081][ T8670] Call Trace: [ 316.800386][ T8670] [ 316.803346][ T8670] dump_stack_lvl+0x188/0x24e [ 316.808055][ T8670] ? show_regs_print_info+0x12/0x12 [ 316.813292][ T8670] ? load_image+0x410/0x410 [ 316.817830][ T8670] ? __might_sleep+0xd0/0xd0 [ 316.822446][ T8670] ? __lock_acquire+0x7bd0/0x7bd0 [ 316.827508][ T8670] should_fail_ex+0x390/0x4c0 [ 316.832241][ T8670] should_failslab+0x5/0x20 [ 316.836776][ T8670] slab_pre_alloc_hook+0x59/0x300 [ 316.841836][ T8670] ? __lock_acquire+0x130c/0x7bd0 [ 316.846907][ T8670] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 316.852695][ T8670] __kmem_cache_alloc_node+0x4f/0x270 [ 316.858102][ T8670] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 316.863855][ T8670] __kmalloc+0xa3/0x240 [ 316.868044][ T8670] tomoyo_realpath_from_path+0xe2/0x5c0 [ 316.873646][ T8670] ? tomoyo_domain+0xd2/0x120 [ 316.878358][ T8670] ? tomoyo_path_number_perm+0x205/0x650 [ 316.884024][ T8670] tomoyo_path_number_perm+0x22f/0x650 [ 316.889523][ T8670] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 316.895034][ T8670] ? ksys_write+0x1ce/0x260 [ 316.899593][ T8670] ? common_file_perm+0x171/0x1c0 [ 316.904683][ T8670] ? __fget_files+0x28/0x460 [ 316.909332][ T8670] security_file_ioctl+0x6c/0xa0 [ 316.914322][ T8670] __se_sys_ioctl+0x48/0x170 [ 316.918949][ T8670] do_syscall_64+0x4c/0xa0 [ 316.923393][ T8670] ? clear_bhb_loop+0x60/0xb0 [ 316.928092][ T8670] ? clear_bhb_loop+0x60/0xb0 [ 316.932795][ T8670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.938730][ T8670] RIP: 0033:0x7fca33d9de59 [ 316.943171][ T8670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.962809][ T8670] RSP: 002b:00007fca34ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.971259][ T8670] RAX: ffffffffffffffda RBX: 00007fca34025fa0 RCX: 00007fca33d9de59 [ 316.979260][ T8670] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000004 [ 316.987272][ T8670] RBP: 00007fca34ced090 R08: 0000000000000000 R09: 0000000000000000 [ 316.995269][ T8670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.003311][ T8670] R13: 00007fca34026038 R14: 00007fca34025fa0 R15: 00007ffd9f3a4b18 [ 317.011337][ T8670] [ 317.101943][ T8670] ERROR: Out of memory at tomoyo_realpath_from_path. [ 317.164037][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.170457][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.315757][ T8675] netlink: 'syz.1.1441': attribute type 6 has an invalid length. [ 317.324001][ T8675] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1441'. [ 317.359191][ T8677] netlink: 'syz.3.1442': attribute type 3 has an invalid length. [ 317.428779][ T8675] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0300:0000:ac14:140a with DS=0x31 [ 317.444898][ T8677] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1442'. [ 318.774430][ T4279] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 318.774856][ T8698] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1451'. [ 320.350482][ T8722] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1459'. [ 320.846102][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 322.084610][ T8756] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1471'. [ 325.636738][ T8779] netlink: 'syz.4.1479': attribute type 4 has an invalid length. [ 325.672293][ T8779] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1479'. [ 325.695739][ T8779] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 325.914684][ T8790] netlink: 'syz.2.1483': attribute type 6 has an invalid length. [ 325.931861][ T8790] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1483'. [ 327.643651][ T8826] netlink: 'syz.2.1497': attribute type 29 has an invalid length. [ 327.685478][ T8826] netlink: 'syz.2.1497': attribute type 29 has an invalid length. [ 327.698497][ T8827] netlink: 'syz.2.1497': attribute type 29 has an invalid length. [ 327.953665][ T8828] netlink: 'syz.2.1497': attribute type 29 has an invalid length. [ 328.462860][ T8830] netlink: 'syz.1.1498': attribute type 4 has an invalid length. [ 328.470692][ T8830] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1498'. [ 328.615315][ T8830] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 328.923918][ T8843] netlink: 'syz.0.1502': attribute type 10 has an invalid length. [ 330.176835][ T8858] netlink: 'syz.4.1508': attribute type 29 has an invalid length. [ 330.222174][ T8858] netlink: 'syz.4.1508': attribute type 29 has an invalid length. [ 330.806675][ T8875] validate_nla: 3 callbacks suppressed [ 330.806714][ T8875] netlink: 'syz.2.1513': attribute type 29 has an invalid length. [ 330.914008][ T8875] netlink: 'syz.2.1513': attribute type 29 has an invalid length. [ 331.389738][ T8883] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1517'. [ 331.516273][ T8877] netlink: 'syz.4.1515': attribute type 4 has an invalid length. [ 331.533183][ T8877] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1515'. [ 331.561840][ T8877] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 334.253431][ T8904] device sit0 left promiscuous mode [ 334.449145][ T8911] device sit0 entered promiscuous mode [ 334.768720][ T8922] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1533'. [ 334.809287][ T8924] netlink: 'syz.4.1534': attribute type 10 has an invalid length. [ 336.096506][ T8952] netlink: 'syz.3.1545': attribute type 29 has an invalid length. [ 336.142805][ T8952] netlink: 'syz.3.1545': attribute type 29 has an invalid length. [ 336.213217][ T8953] netlink: 'syz.3.1545': attribute type 29 has an invalid length. [ 336.405862][ T8952] netlink: 'syz.3.1545': attribute type 29 has an invalid length. [ 338.172854][ T8990] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1557'. [ 339.191670][ T9007] netlink: 'syz.1.1563': attribute type 29 has an invalid length. [ 339.218348][ T9007] netlink: 'syz.1.1563': attribute type 29 has an invalid length. [ 339.292160][ T9010] netlink: 'syz.1.1563': attribute type 29 has an invalid length. [ 339.410815][ T9007] netlink: 'syz.1.1563': attribute type 29 has an invalid length. [ 343.112206][ T9038] device sit0 left promiscuous mode [ 343.241082][ T9045] device sit0 entered promiscuous mode [ 343.809600][ T9067] netlink: 'syz.3.1585': attribute type 8 has an invalid length. [ 343.909040][ T9067] netlink: 'syz.3.1585': attribute type 4 has an invalid length. [ 343.948920][ T9067] netlink: 'syz.3.1585': attribute type 7 has an invalid length. [ 343.979196][ T9067] netlink: 'syz.3.1585': attribute type 8 has an invalid length. [ 344.094823][ T9067] netlink: 'syz.3.1585': attribute type 7 has an invalid length. [ 344.172088][ T9067] netlink: 125876 bytes leftover after parsing attributes in process `syz.3.1585'. [ 345.562197][ T9084] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1592'. [ 345.579080][ T9088] netlink: 'syz.1.1593': attribute type 4 has an invalid length. [ 345.588214][ T9088] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1593'. [ 345.612169][ T9088] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 345.878577][ T9095] device sit0 left promiscuous mode [ 345.922661][ T9101] FAULT_INJECTION: forcing a failure. [ 345.922661][ T9101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.052101][ T9101] CPU: 0 PID: 9101 Comm: syz.2.1598 Not tainted syzkaller #0 [ 346.059587][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 346.069691][ T9101] Call Trace: [ 346.073024][ T9101] [ 346.075997][ T9101] dump_stack_lvl+0x188/0x24e [ 346.080736][ T9101] ? show_regs_print_info+0x12/0x12 [ 346.085988][ T9101] ? load_image+0x410/0x410 [ 346.090551][ T9101] ? __lock_acquire+0x7bd0/0x7bd0 [ 346.095635][ T9101] should_fail_ex+0x390/0x4c0 [ 346.100367][ T9101] _copy_from_user+0x2c/0x170 [ 346.105095][ T9101] ___sys_sendmsg+0x1c3/0x360 [ 346.109809][ T9101] ? __sys_sendmsg+0x2a0/0x2a0 [ 346.114621][ T9101] ? __lock_acquire+0x7bd0/0x7bd0 [ 346.119704][ T9101] __se_sys_sendmsg+0x1c3/0x2b0 [ 346.124583][ T9101] ? __x64_sys_sendmsg+0x80/0x80 [ 346.129560][ T9101] ? lockdep_hardirqs_on+0x94/0x140 [ 346.134827][ T9101] do_syscall_64+0x4c/0xa0 [ 346.139322][ T9101] ? clear_bhb_loop+0x60/0xb0 [ 346.144047][ T9101] ? clear_bhb_loop+0x60/0xb0 [ 346.148771][ T9101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.154754][ T9101] RIP: 0033:0x7fa699f9de59 [ 346.159212][ T9101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.178857][ T9101] RSP: 002b:00007fa69ae22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.187324][ T9101] RAX: ffffffffffffffda RBX: 00007fa69a225fa0 RCX: 00007fa699f9de59 [ 346.195409][ T9101] RDX: 0000000004000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 346.203494][ T9101] RBP: 00007fa69ae22090 R08: 0000000000000000 R09: 0000000000000000 [ 346.211486][ T9101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.219491][ T9101] R13: 00007fa69a226038 R14: 00007fa69a225fa0 R15: 00007ffccda65828 [ 346.227535][ T9101] [ 346.591679][ T9103] device sit0 entered promiscuous mode [ 346.721340][ T9102] device sit0 entered promiscuous mode [ 346.859859][ T9106] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 346.883434][ T9111] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1600'. [ 346.910909][ T9122] FAULT_INJECTION: forcing a failure. [ 346.910909][ T9122] name failslab, interval 1, probability 0, space 0, times 0 [ 346.931027][ T9122] CPU: 0 PID: 9122 Comm: syz.3.1603 Not tainted syzkaller #0 [ 346.938483][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 346.948588][ T9122] Call Trace: [ 346.951913][ T9122] [ 346.954880][ T9122] dump_stack_lvl+0x188/0x24e [ 346.959609][ T9122] ? show_regs_print_info+0x12/0x12 [ 346.964851][ T9122] ? load_image+0x410/0x410 [ 346.969421][ T9122] ? __might_sleep+0xd0/0xd0 [ 346.974151][ T9122] ? __lock_acquire+0x7bd0/0x7bd0 [ 346.979246][ T9122] should_fail_ex+0x390/0x4c0 [ 346.983979][ T9122] should_failslab+0x5/0x20 [ 346.988527][ T9122] slab_pre_alloc_hook+0x59/0x300 [ 346.993609][ T9122] ? prog_array_map_alloc+0x4d/0x1f0 [ 346.998970][ T9122] __kmem_cache_alloc_node+0x4f/0x270 [ 347.004483][ T9122] ? prog_array_map_alloc+0x4d/0x1f0 [ 347.009826][ T9122] kmalloc_trace+0x26/0xe0 [ 347.014306][ T9122] prog_array_map_alloc+0x4d/0x1f0 [ 347.019485][ T9122] map_create+0x524/0xff0 [ 347.023876][ T9122] ? security_bpf+0x7a/0xa0 [ 347.028451][ T9122] __sys_bpf+0x38b/0x780 [ 347.032759][ T9122] ? bpf_link_show_fdinfo+0x380/0x380 [ 347.038201][ T9122] ? lock_chain_count+0x20/0x20 [ 347.043131][ T9122] __x64_sys_bpf+0x78/0x90 [ 347.047607][ T9122] do_syscall_64+0x4c/0xa0 [ 347.052077][ T9122] ? clear_bhb_loop+0x60/0xb0 [ 347.056799][ T9122] ? clear_bhb_loop+0x60/0xb0 [ 347.061530][ T9122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.067486][ T9122] RIP: 0033:0x7f1c9cb9de59 [ 347.071947][ T9122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.091615][ T9122] RSP: 002b:00007f1c9adf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.100104][ T9122] RAX: ffffffffffffffda RBX: 00007f1c9ce25fa0 RCX: 00007f1c9cb9de59 [ 347.108130][ T9122] RDX: 0000000000000050 RSI: 0000200000000a40 RDI: 0000000000000000 [ 347.116325][ T9122] RBP: 00007f1c9adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 347.124381][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.132442][ T9122] R13: 00007f1c9ce26038 R14: 00007f1c9ce25fa0 R15: 00007ffd52f3dce8 [ 347.140484][ T9122] [ 347.356897][ T9130] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1607'. [ 347.689498][ T9136] netlink: 'syz.3.1609': attribute type 4 has an invalid length. [ 347.710251][ T9136] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1609'. [ 347.721673][ T9136] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 348.293134][ T9145] device sit0 left promiscuous mode [ 348.397124][ T9147] device sit0 entered promiscuous mode [ 349.674495][ T9168] device sit0 left promiscuous mode [ 349.978204][ T9172] device sit0 entered promiscuous mode [ 350.090670][ T9170] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1620'. [ 350.359570][ T9185] netlink: 'syz.4.1624': attribute type 4 has an invalid length. [ 350.398520][ T9185] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1624'. [ 350.428283][ T9185] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 351.018855][ T9201] device sit0 left promiscuous mode [ 351.092753][ T9202] device sit0 entered promiscuous mode [ 351.470718][ T9212] device sit0 left promiscuous mode [ 351.882142][ T9215] device sit0 entered promiscuous mode [ 352.479129][ T9242] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1640'. [ 352.779163][ T9253] netlink: 'syz.3.1645': attribute type 21 has an invalid length. [ 352.847829][ T9253] netlink: 'syz.3.1645': attribute type 1 has an invalid length. [ 352.860220][ T9253] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1645'. [ 352.954949][ T9248] netlink: 'syz.1.1641': attribute type 4 has an invalid length. [ 353.032201][ T9248] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1641'. [ 353.148472][ T9248] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 353.872013][ T9265] device sit0 left promiscuous mode [ 353.993881][ T9268] device sit0 entered promiscuous mode [ 354.330801][ T9281] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1653'. [ 354.650037][ T9289] netlink: 'syz.2.1654': attribute type 2 has an invalid length. [ 355.325837][ T9301] netlink: 'syz.3.1662': attribute type 4 has an invalid length. [ 355.381893][ T9301] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1662'. [ 355.420174][ T9301] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 355.532997][ T9314] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1667'. [ 356.409887][ T9333] FAULT_INJECTION: forcing a failure. [ 356.409887][ T9333] name failslab, interval 1, probability 0, space 0, times 0 [ 356.482255][ T9333] CPU: 1 PID: 9333 Comm: syz.2.1674 Not tainted syzkaller #0 [ 356.489728][ T9333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 356.499834][ T9333] Call Trace: [ 356.503155][ T9333] [ 356.506135][ T9333] dump_stack_lvl+0x188/0x24e [ 356.510874][ T9333] ? show_regs_print_info+0x12/0x12 [ 356.516121][ T9333] ? load_image+0x410/0x410 [ 356.520683][ T9333] ? __might_sleep+0xd0/0xd0 [ 356.525329][ T9333] ? __lock_acquire+0x7bd0/0x7bd0 [ 356.530419][ T9333] should_fail_ex+0x390/0x4c0 [ 356.535163][ T9333] should_failslab+0x5/0x20 [ 356.539712][ T9333] slab_pre_alloc_hook+0x59/0x300 [ 356.544791][ T9333] ? tomoyo_encode+0x28a/0x550 [ 356.549614][ T9333] __kmem_cache_alloc_node+0x4f/0x270 [ 356.555055][ T9333] ? tomoyo_encode+0x28a/0x550 [ 356.559875][ T9333] __kmalloc+0xa3/0x240 [ 356.564099][ T9333] tomoyo_encode+0x28a/0x550 [ 356.568763][ T9333] tomoyo_realpath_from_path+0x578/0x5c0 [ 356.574463][ T9333] ? tomoyo_domain+0xd2/0x120 [ 356.579212][ T9333] ? tomoyo_path_number_perm+0x205/0x650 [ 356.584911][ T9333] tomoyo_path_number_perm+0x22f/0x650 [ 356.590528][ T9333] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 356.596130][ T9333] ? ksys_write+0x1ce/0x260 [ 356.600690][ T9333] ? common_file_perm+0x171/0x1c0 [ 356.605805][ T9333] ? __fget_files+0x28/0x460 [ 356.610464][ T9333] security_file_ioctl+0x6c/0xa0 [ 356.615469][ T9333] __se_sys_ioctl+0x48/0x170 [ 356.620137][ T9333] do_syscall_64+0x4c/0xa0 [ 356.624598][ T9333] ? clear_bhb_loop+0x60/0xb0 [ 356.629312][ T9333] ? clear_bhb_loop+0x60/0xb0 [ 356.634038][ T9333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.639980][ T9333] RIP: 0033:0x7fa699f9de59 [ 356.644489][ T9333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.664239][ T9333] RSP: 002b:00007fa69ae22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.672702][ T9333] RAX: ffffffffffffffda RBX: 00007fa69a225fa0 RCX: 00007fa699f9de59 [ 356.680719][ T9333] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000004 [ 356.688730][ T9333] RBP: 00007fa69ae22090 R08: 0000000000000000 R09: 0000000000000000 [ 356.696742][ T9333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.704839][ T9333] R13: 00007fa69a226038 R14: 00007fa69a225fa0 R15: 00007ffccda65828 [ 356.712871][ T9333] [ 356.760914][ T9333] ERROR: Out of memory at tomoyo_realpath_from_path. [ 357.043798][ T9323] device sit0 left promiscuous mode [ 357.339527][ T9326] device sit0 entered promiscuous mode [ 357.475070][ T9336] netlink: 'syz.4.1675': attribute type 10 has an invalid length. [ 357.706085][ T9347] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0300:0000:ac14:140a with DS=0x31 [ 357.825718][ T9351] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1681'. [ 358.010903][ T9349] netlink: 'syz.4.1680': attribute type 4 has an invalid length. [ 358.131257][ T9349] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1680'. [ 358.211967][ T9349] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 359.485839][ T9379] device sit0 left promiscuous mode [ 359.710340][ T9383] device sit0 entered promiscuous mode [ 360.119123][ T9395] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1695'. [ 360.144791][ T9395] C: renamed from team_slave_0 [ 360.817643][ T9403] netlink: 'syz.1.1698': attribute type 10 has an invalid length. [ 360.832908][ T9409] netlink: 'syz.4.1701': attribute type 4 has an invalid length. [ 360.855391][ T9409] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1701'. [ 360.915988][ T9409] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 361.340082][ T9421] device syzkaller0 entered promiscuous mode [ 362.480596][ T9456] netlink: 'syz.3.1717': attribute type 4 has an invalid length. [ 363.195813][ T9466] delete_channel: no stack [ 365.171912][ T9461] netlink: 'syz.2.1718': attribute type 4 has an invalid length. [ 365.179922][ T9461] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1718'. [ 365.193442][ T9461] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 365.233033][ T9484] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1726'. [ 365.242456][ T9487] netlink: 'syz.0.1725': attribute type 10 has an invalid length. [ 365.264906][ T9487] team0: Device wg1 is of different type [ 366.957496][ T9521] netlink: 'syz.3.1738': attribute type 4 has an invalid length. [ 366.975652][ T9521] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1738'. [ 367.001978][ T9521] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 367.266441][ T9533] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1743'. [ 367.395802][ T9536] device sit0 left promiscuous mode [ 367.934941][ T9537] device sit0 entered promiscuous mode [ 368.972428][ T9564] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1753'. [ 369.107213][ T9572] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1757'. [ 369.180901][ T9568] netlink: 'syz.4.1756': attribute type 4 has an invalid length. [ 369.231100][ T9568] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1756'. [ 369.256113][ T9568] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 369.343858][ T9578] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1759'. [ 370.332175][ T9595] device sit0 left promiscuous mode [ 370.436432][ T9597] device sit0 entered promiscuous mode [ 370.754354][ T9607] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1768'. [ 371.269926][ T9621] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1774'. [ 371.330589][ T9623] netlink: 'syz.0.1775': attribute type 10 has an invalid length. [ 371.382561][ T9623] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 371.530380][ T9619] netlink: 'syz.4.1773': attribute type 4 has an invalid length. [ 371.567177][ T9619] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1773'. [ 371.637481][ T9619] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 372.725269][ T9639] device sit0 left promiscuous mode [ 372.855332][ T9641] device sit0 entered promiscuous mode [ 372.900944][ T9645] sctp: [Deprecated]: syz.3.1781 (pid 9645) Use of int in maxseg socket option. [ 372.900944][ T9645] Use struct sctp_assoc_value instead [ 373.854357][ T9651] FAULT_INJECTION: forcing a failure. [ 373.854357][ T9651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.898771][ T9651] CPU: 0 PID: 9651 Comm: syz.1.1782 Not tainted syzkaller #0 [ 373.906228][ T9651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 373.916310][ T9651] Call Trace: [ 373.919617][ T9651] [ 373.922574][ T9651] dump_stack_lvl+0x188/0x24e [ 373.927287][ T9651] ? show_regs_print_info+0x12/0x12 [ 373.932516][ T9651] ? load_image+0x410/0x410 [ 373.937056][ T9651] ? __lock_acquire+0x7bd0/0x7bd0 [ 373.942116][ T9651] should_fail_ex+0x390/0x4c0 [ 373.946822][ T9651] _copy_from_user+0x2c/0x170 [ 373.951529][ T9651] __copy_msghdr+0x384/0x560 [ 373.956160][ T9651] ___sys_sendmsg+0x210/0x360 [ 373.960870][ T9651] ? __sys_sendmsg+0x2a0/0x2a0 [ 373.965680][ T9651] ? __lock_acquire+0x7bd0/0x7bd0 [ 373.970758][ T9651] __se_sys_sendmsg+0x1c3/0x2b0 [ 373.975637][ T9651] ? __x64_sys_sendmsg+0x80/0x80 [ 373.980872][ T9651] ? lockdep_hardirqs_on+0x94/0x140 [ 373.986110][ T9651] do_syscall_64+0x4c/0xa0 [ 373.990554][ T9651] ? clear_bhb_loop+0x60/0xb0 [ 373.995260][ T9651] ? clear_bhb_loop+0x60/0xb0 [ 373.999967][ T9651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.005897][ T9651] RIP: 0033:0x7fca33d9de59 [ 374.010335][ T9651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.029969][ T9651] RSP: 002b:00007fca34ced028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.038501][ T9651] RAX: ffffffffffffffda RBX: 00007fca34025fa0 RCX: 00007fca33d9de59 [ 374.046501][ T9651] RDX: 0000000004000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 374.054499][ T9651] RBP: 00007fca34ced090 R08: 0000000000000000 R09: 0000000000000000 [ 374.062586][ T9651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.070603][ T9651] R13: 00007fca34026038 R14: 00007fca34025fa0 R15: 00007ffd9f3a4b18 [ 374.078636][ T9651] [ 374.143940][ T9653] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1783'. [ 374.309841][ T9661] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1786'. [ 374.480103][ T9666] FAULT_INJECTION: forcing a failure. [ 374.480103][ T9666] name failslab, interval 1, probability 0, space 0, times 0 [ 374.524765][ T9670] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1789'. [ 374.528269][ T9666] CPU: 1 PID: 9666 Comm: syz.3.1791 Not tainted syzkaller #0 [ 374.541461][ T9666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 374.551546][ T9666] Call Trace: [ 374.554848][ T9666] [ 374.557803][ T9666] dump_stack_lvl+0x188/0x24e [ 374.562517][ T9666] ? show_regs_print_info+0x12/0x12 [ 374.567745][ T9666] ? load_image+0x410/0x410 [ 374.572287][ T9666] ? __might_sleep+0xd0/0xd0 [ 374.576924][ T9666] ? __lock_acquire+0x7bd0/0x7bd0 [ 374.581984][ T9666] should_fail_ex+0x390/0x4c0 [ 374.586690][ T9666] should_failslab+0x5/0x20 [ 374.591214][ T9666] slab_pre_alloc_hook+0x59/0x300 [ 374.596267][ T9666] ? __lock_acquire+0x130c/0x7bd0 [ 374.601332][ T9666] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 374.607090][ T9666] __kmem_cache_alloc_node+0x4f/0x270 [ 374.612496][ T9666] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 374.618246][ T9666] __kmalloc+0xa3/0x240 [ 374.622444][ T9666] tomoyo_realpath_from_path+0xe2/0x5c0 [ 374.628021][ T9666] ? tomoyo_domain+0xd2/0x120 [ 374.632740][ T9666] ? tomoyo_path_number_perm+0x205/0x650 [ 374.638406][ T9666] tomoyo_path_number_perm+0x22f/0x650 [ 374.643908][ T9666] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 374.649487][ T9666] ? ksys_write+0x1ce/0x260 [ 374.654036][ T9666] ? common_file_perm+0x171/0x1c0 [ 374.659141][ T9666] ? __fget_files+0x28/0x460 [ 374.663797][ T9666] security_file_ioctl+0x6c/0xa0 [ 374.668791][ T9666] __se_sys_ioctl+0x48/0x170 [ 374.673434][ T9666] do_syscall_64+0x4c/0xa0 [ 374.677889][ T9666] ? clear_bhb_loop+0x60/0xb0 [ 374.682614][ T9666] ? clear_bhb_loop+0x60/0xb0 [ 374.687349][ T9666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.693287][ T9666] RIP: 0033:0x7f1c9cb9de59 [ 374.697745][ T9666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.717399][ T9666] RSP: 002b:00007f1c9adf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.725847][ T9666] RAX: ffffffffffffffda RBX: 00007f1c9ce25fa0 RCX: 00007f1c9cb9de59 [ 374.733846][ T9666] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000003 [ 374.741847][ T9666] RBP: 00007f1c9adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 374.749847][ T9666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.757864][ T9666] R13: 00007f1c9ce26038 R14: 00007f1c9ce25fa0 R15: 00007ffd52f3dce8 [ 374.765888][ T9666] [ 374.803349][ T9670] netlink: 'syz.4.1789': attribute type 11 has an invalid length. [ 374.811274][ T9670] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1789'. [ 374.879447][ T9670] netlink: 'syz.4.1789': attribute type 11 has an invalid length. [ 374.922484][ T9670] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1789'. [ 374.949748][ T9665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.961850][ T9666] ERROR: Out of memory at tomoyo_realpath_from_path. [ 375.817274][ T9681] device sit0 left promiscuous mode [ 376.159731][ T9687] device sit0 entered promiscuous mode [ 376.257415][ T9686] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1797'. [ 377.116236][ T9700] netlink: 'syz.0.1799': attribute type 10 has an invalid length. [ 377.130903][ T9700] team0: Device ipvlan1 failed to register rx_handler [ 377.928824][ T9726] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1806'. [ 378.640062][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.646620][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.247124][ T9738] device sit0 left promiscuous mode [ 379.509610][ T9743] device sit0 entered promiscuous mode [ 380.310239][ T9759] device sit0 left promiscuous mode [ 380.726235][ T9767] device sit0 entered promiscuous mode [ 381.028198][ T9772] netlink: 'syz.2.1823': attribute type 10 has an invalid length. [ 381.046673][ T9772] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1823'. [ 381.101101][ T9772] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 381.620550][ T9787] device sit0 left promiscuous mode [ 381.988080][ T9791] device sit0 entered promiscuous mode [ 382.527167][ T9806] device lo entered promiscuous mode [ 382.533361][ T9806] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 382.995670][ T9817] FAULT_INJECTION: forcing a failure. [ 382.995670][ T9817] name failslab, interval 1, probability 0, space 0, times 0 [ 383.066449][ T9817] CPU: 1 PID: 9817 Comm: syz.0.1837 Not tainted syzkaller #0 [ 383.073926][ T9817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 383.084040][ T9817] Call Trace: [ 383.087365][ T9817] [ 383.090345][ T9817] dump_stack_lvl+0x188/0x24e [ 383.095089][ T9817] ? show_regs_print_info+0x12/0x12 [ 383.100362][ T9817] ? load_image+0x410/0x410 [ 383.104951][ T9817] ? __might_sleep+0xd0/0xd0 [ 383.109600][ T9817] ? __lock_acquire+0x7bd0/0x7bd0 [ 383.114696][ T9817] should_fail_ex+0x390/0x4c0 [ 383.119433][ T9817] should_failslab+0x5/0x20 [ 383.123996][ T9817] slab_pre_alloc_hook+0x59/0x300 [ 383.129089][ T9817] kmem_cache_alloc_node+0x5a/0x310 [ 383.134361][ T9817] ? __alloc_skb+0xf9/0x7d0 [ 383.139018][ T9817] __alloc_skb+0xf9/0x7d0 [ 383.143411][ T9817] alloc_skb_with_frags+0xa7/0x710 [ 383.148682][ T9817] ? mark_lock+0x94/0x320 [ 383.153091][ T9817] sock_alloc_send_pskb+0x87f/0x9a0 [ 383.158429][ T9817] ? sock_kzfree_s+0x50/0x50 [ 383.163101][ T9817] tun_get_user+0x800/0x3c20 [ 383.167773][ T9817] ? rcu_read_unlock+0xa0/0xa0 [ 383.172600][ T9817] ? tun_get+0x1c/0x2e0 [ 383.176802][ T9817] ? __lock_acquire+0x7bd0/0x7bd0 [ 383.181873][ T9817] ? tun_get+0x1c/0x2e0 [ 383.186069][ T9817] tun_chr_write_iter+0x112/0x1f0 [ 383.191138][ T9817] vfs_write+0x482/0x9a0 [ 383.195431][ T9817] ? file_end_write+0x250/0x250 [ 383.200327][ T9817] ? __fget_files+0x3fc/0x460 [ 383.205054][ T9817] ? __fdget_pos+0x1d4/0x360 [ 383.209683][ T9817] ? ksys_write+0x70/0x260 [ 383.214147][ T9817] ksys_write+0x14d/0x260 [ 383.218535][ T9817] ? __ia32_sys_read+0x80/0x80 [ 383.223361][ T9817] ? lockdep_hardirqs_on+0x94/0x140 [ 383.228612][ T9817] do_syscall_64+0x4c/0xa0 [ 383.233156][ T9817] ? clear_bhb_loop+0x60/0xb0 [ 383.237872][ T9817] ? clear_bhb_loop+0x60/0xb0 [ 383.242627][ T9817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.248654][ T9817] RIP: 0033:0x7f4bfd19de59 [ 383.253104][ T9817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.272746][ T9817] RSP: 002b:00007f4bfdffa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 383.281200][ T9817] RAX: ffffffffffffffda RBX: 00007f4bfd425fa0 RCX: 00007f4bfd19de59 [ 383.289204][ T9817] RDX: 000000000000fdef RSI: 0000200000000600 RDI: 00000000000000c8 [ 383.297202][ T9817] RBP: 00007f4bfdffa090 R08: 0000000000000000 R09: 0000000000000000 [ 383.305660][ T9817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.313659][ T9817] R13: 00007f4bfd426038 R14: 00007f4bfd425fa0 R15: 00007fffc474cdb8 [ 383.321686][ T9817] [ 383.454345][ T9823] netlink: 'syz.3.1840': attribute type 2 has an invalid length. [ 383.997176][ T9839] device sit0 left promiscuous mode [ 384.128989][ T9840] device sit0 entered promiscuous mode [ 384.975614][ T9862] netlink: 'syz.1.1853': attribute type 4 has an invalid length. [ 385.012940][ T9862] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1853'. [ 385.052042][ T9862] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 385.445533][ T9877] netlink: 'syz.0.1856': attribute type 2 has an invalid length. [ 385.734215][ T9882] team0: Port device team_slave_0 removed [ 385.772652][ T9881] delete_channel: no stack [ 385.801824][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 385.882336][ T9889] device sit0 left promiscuous mode [ 385.904244][ T9890] netlink: 'syz.0.1862': attribute type 11 has an invalid length. [ 386.002075][ T9890] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1862'. [ 386.073104][ T9891] netlink: 'syz.0.1862': attribute type 11 has an invalid length. [ 386.102156][ T9891] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1862'. [ 386.124394][ T9887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.231788][ T9892] device sit0 entered promiscuous mode [ 386.433392][ T9907] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1868'. [ 386.560134][ T9911] netlink: 'syz.3.1869': attribute type 4 has an invalid length. [ 386.578322][ T9911] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1869'. [ 386.588615][ T9911] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 387.631433][ T9951] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1881'. [ 387.763350][ T9955] device veth0_to_bridge left promiscuous mode [ 387.783042][ T9955] bridge0: port 3(veth0_to_bridge) entered disabled state [ 387.852374][ T9955] device bridge_slave_1 left promiscuous mode [ 387.859867][ T9955] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.949027][ T9955] device bridge_slave_0 left promiscuous mode [ 387.968372][ T9955] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.189847][ T9970] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1888'. [ 388.224571][ T9961] device sit0 left promiscuous mode [ 388.649380][ T9966] device sit0 entered promiscuous mode [ 390.102669][ T9993] netlink: 'syz.1.1896': attribute type 21 has an invalid length. [ 390.244243][ T9997] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1897'. [ 390.296204][ T9997] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 390.342431][ T9999] netlink: 'syz.4.1897': attribute type 29 has an invalid length. [ 390.407592][ T9997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.491515][ T9999] netlink: 'syz.4.1897': attribute type 29 has an invalid length. [ 390.621190][T10006] netlink: 'syz.4.1897': attribute type 29 has an invalid length. [ 390.755740][ T9997] netlink: 'syz.4.1897': attribute type 29 has an invalid length. [ 390.822499][T10010] netlink: 'syz.4.1897': attribute type 29 has an invalid length. [ 391.575255][T10019] device sit0 left promiscuous mode [ 391.986230][T10020] device sit0 entered promiscuous mode [ 392.063673][T10025] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1906'. [ 395.103388][T10090] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1925'. [ 395.362242][T10096] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1928'. [ 396.940374][T10122] device sit0 left promiscuous mode [ 397.176924][T10120] device sit0 entered promiscuous mode [ 398.942372][T10151] netlink: 'syz.1.1948': attribute type 10 has an invalid length. [ 398.950287][T10151] netlink: 65023 bytes leftover after parsing attributes in process `syz.1.1948'. [ 399.179882][T10160] netlink: 'syz.1.1962': attribute type 10 has an invalid length. [ 399.209734][T10160] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1962'. [ 399.229980][T10155] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 400.366060][T10184] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1956'. [ 401.067551][T10202] FAULT_INJECTION: forcing a failure. [ 401.067551][T10202] name failslab, interval 1, probability 0, space 0, times 0 [ 401.085056][T10203] netlink: 'syz.2.1965': attribute type 10 has an invalid length. [ 401.111839][T10203] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1965'. [ 401.132374][T10202] CPU: 1 PID: 10202 Comm: syz.0.1964 Not tainted syzkaller #0 [ 401.139920][T10202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.150027][T10202] Call Trace: [ 401.153353][T10202] [ 401.156341][T10202] dump_stack_lvl+0x188/0x24e [ 401.161076][T10202] ? show_regs_print_info+0x12/0x12 [ 401.166323][T10202] ? load_image+0x410/0x410 [ 401.170885][T10202] ? __might_sleep+0xd0/0xd0 [ 401.175522][T10202] ? __lock_acquire+0x7bd0/0x7bd0 [ 401.180605][T10202] should_fail_ex+0x390/0x4c0 [ 401.185419][T10202] should_failslab+0x5/0x20 [ 401.189973][T10202] slab_pre_alloc_hook+0x59/0x300 [ 401.195073][T10202] ? __get_vm_area_node+0x122/0x330 [ 401.200322][T10202] __kmem_cache_alloc_node+0x4f/0x270 [ 401.205751][T10202] ? __get_vm_area_node+0x122/0x330 [ 401.210983][T10202] kmalloc_node_trace+0x22/0xe0 [ 401.215876][T10202] __get_vm_area_node+0x122/0x330 [ 401.220931][T10202] ? __local_bh_enable_ip+0x136/0x1c0 [ 401.226349][T10202] __vmalloc_node_range+0x357/0x1380 [ 401.231794][T10202] ? netlink_sendmsg+0x5ec/0xbd0 [ 401.236776][T10202] ? netlink_insert+0x28d/0x13b0 [ 401.241755][T10202] ? free_vm_area+0x50/0x50 [ 401.246307][T10202] ? netlink_sendmsg+0x5ec/0xbd0 [ 401.251276][T10202] vmalloc+0x75/0x80 [ 401.255207][T10202] ? netlink_sendmsg+0x5ec/0xbd0 [ 401.260171][T10202] netlink_sendmsg+0x5ec/0xbd0 [ 401.264976][T10202] ? netlink_getsockopt+0x550/0x550 [ 401.270196][T10202] ? aa_file_perm+0x3ea/0xf00 [ 401.274903][T10202] ? aa_file_perm+0x112/0xf00 [ 401.279609][T10202] ? aa_sock_msg_perm+0x94/0x150 [ 401.284578][T10202] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 401.289887][T10202] ? security_socket_sendmsg+0x7c/0xa0 [ 401.295375][T10202] sock_write_iter+0x2d5/0x3e0 [ 401.300191][T10202] ? sock_read_iter+0x3a0/0x3a0 [ 401.305082][T10202] ? common_file_perm+0x171/0x1c0 [ 401.310137][T10202] vfs_write+0x482/0x9a0 [ 401.314421][T10202] ? file_end_write+0x250/0x250 [ 401.319315][T10202] ? __fget_files+0x3fc/0x460 [ 401.324041][T10202] ? __fdget_pos+0x1d4/0x360 [ 401.328664][T10202] ? ksys_write+0x70/0x260 [ 401.333118][T10202] ksys_write+0x14d/0x260 [ 401.337484][T10202] ? __ia32_sys_read+0x80/0x80 [ 401.342282][T10202] ? lockdep_hardirqs_on+0x94/0x140 [ 401.347517][T10202] do_syscall_64+0x4c/0xa0 [ 401.351961][T10202] ? clear_bhb_loop+0x60/0xb0 [ 401.356664][T10202] ? clear_bhb_loop+0x60/0xb0 [ 401.361384][T10202] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.367316][T10202] RIP: 0033:0x7f4bfd19de59 [ 401.371775][T10202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.391505][T10202] RSP: 002b:00007f4bfdffa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 401.399971][T10202] RAX: ffffffffffffffda RBX: 00007f4bfd425fa0 RCX: 00007f4bfd19de59 [ 401.407974][T10202] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 401.415976][T10202] RBP: 00007f4bfdffa090 R08: 0000000000000000 R09: 0000000000000000 [ 401.423983][T10202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.431984][T10202] R13: 00007f4bfd426038 R14: 00007f4bfd425fa0 R15: 00007fffc474cdb8 [ 401.440083][T10202] [ 401.511813][T10202] syz.0.1964: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 401.536070][T10210] netlink: 'syz.3.1967': attribute type 1 has an invalid length. [ 401.571100][T10210] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1967'. [ 401.602037][T10210] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 401.621872][T10202] CPU: 0 PID: 10202 Comm: syz.0.1964 Not tainted syzkaller #0 [ 401.629425][T10202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.639543][T10202] Call Trace: [ 401.642861][T10202] [ 401.645829][T10202] dump_stack_lvl+0x188/0x24e [ 401.650572][T10202] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 401.657066][T10202] ? show_regs_print_info+0x12/0x12 [ 401.662317][T10202] ? load_image+0x410/0x410 [ 401.666870][T10202] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 401.673333][T10202] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 401.679880][T10202] warn_alloc+0x242/0x330 [ 401.684259][T10202] ? __get_vm_area_node+0x122/0x330 [ 401.689530][T10202] ? zone_watermark_ok_safe+0x270/0x270 [ 401.695130][T10202] ? rcu_is_watching+0x11/0xa0 [ 401.699982][T10202] ? __get_vm_area_node+0x318/0x330 [ 401.705225][T10202] ? __local_bh_enable_ip+0x136/0x1c0 [ 401.710638][T10202] __vmalloc_node_range+0x37c/0x1380 [ 401.715984][T10202] ? netlink_insert+0x28d/0x13b0 [ 401.720974][T10202] ? free_vm_area+0x50/0x50 [ 401.725532][T10202] ? netlink_sendmsg+0x5ec/0xbd0 [ 401.730511][T10202] vmalloc+0x75/0x80 [ 401.734448][T10202] ? netlink_sendmsg+0x5ec/0xbd0 [ 401.739439][T10202] netlink_sendmsg+0x5ec/0xbd0 [ 401.744250][T10202] ? netlink_getsockopt+0x550/0x550 [ 401.749489][T10202] ? aa_file_perm+0x3ea/0xf00 [ 401.754207][T10202] ? aa_file_perm+0x112/0xf00 [ 401.758919][T10202] ? aa_sock_msg_perm+0x94/0x150 [ 401.763894][T10202] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 401.769216][T10202] ? security_socket_sendmsg+0x7c/0xa0 [ 401.774723][T10202] sock_write_iter+0x2d5/0x3e0 [ 401.779534][T10202] ? sock_read_iter+0x3a0/0x3a0 [ 401.784434][T10202] ? common_file_perm+0x171/0x1c0 [ 401.789500][T10202] vfs_write+0x482/0x9a0 [ 401.793834][T10202] ? file_end_write+0x250/0x250 [ 401.798733][T10202] ? __fget_files+0x3fc/0x460 [ 401.803469][T10202] ? __fdget_pos+0x1d4/0x360 [ 401.808119][T10202] ? ksys_write+0x70/0x260 [ 401.812591][T10202] ksys_write+0x14d/0x260 [ 401.816962][T10202] ? __ia32_sys_read+0x80/0x80 [ 401.821771][T10202] ? lockdep_hardirqs_on+0x94/0x140 [ 401.827017][T10202] do_syscall_64+0x4c/0xa0 [ 401.831481][T10202] ? clear_bhb_loop+0x60/0xb0 [ 401.836196][T10202] ? clear_bhb_loop+0x60/0xb0 [ 401.840910][T10202] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.846857][T10202] RIP: 0033:0x7f4bfd19de59 [ 401.851336][T10202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.870983][T10202] RSP: 002b:00007f4bfdffa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 401.879439][T10202] RAX: ffffffffffffffda RBX: 00007f4bfd425fa0 RCX: 00007f4bfd19de59 [ 401.887453][T10202] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 401.895469][T10202] RBP: 00007f4bfdffa090 R08: 0000000000000000 R09: 0000000000000000 [ 401.903473][T10202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.911484][T10202] R13: 00007f4bfd426038 R14: 00007f4bfd425fa0 R15: 00007fffc474cdb8 [ 401.919517][T10202] [ 402.084319][T10215] netlink: 'syz.4.1969': attribute type 10 has an invalid length. [ 402.123859][T10215] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1969'. [ 402.171963][T10215] bridge0: port 3(veth0_to_bridge) entered blocking state [ 402.198137][T10215] bridge0: port 3(veth0_to_bridge) entered disabled state [ 402.220495][T10215] device veth0_to_bridge entered promiscuous mode [ 402.238491][T10215] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.281366][T10215] bridge0: port 3(veth0_to_bridge) entered blocking state [ 402.288728][T10215] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 402.361152][T10202] Mem-Info: [ 402.368187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.380683][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.393179][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.405635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.418172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.430710][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.443192][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.455649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.493702][T10202] active_anon:7138 inactive_anon:0 isolated_anon:0 [ 402.493702][T10202] active_file:18056 inactive_file:40083 isolated_file:0 [ 402.493702][T10202] unevictable:768 dirty:135 writeback:0 [ 402.493702][T10202] slab_reclaimable:20813 slab_unreclaimable:96457 [ 402.493702][T10202] mapped:29540 shmem:1361 pagetables:628 [ 402.493702][T10202] sec_pagetables:0 bounce:0 [ 402.493702][T10202] kernel_misc_reclaimable:0 [ 402.493702][T10202] free:1322810 free_pcp:7332 free_cma:0 [ 402.562083][T10202] Node 0 active_anon:28552kB inactive_anon:0kB active_file:72224kB inactive_file:160124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118160kB dirty:540kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11244kB pagetables:2512kB sec_pagetables:0kB all_unreclaimable? no [ 402.631595][T10202] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 402.698482][T10202] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.738107][T10202] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 402.748100][T10202] Node 0 DMA32 free:1370704kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:28552kB inactive_anon:0kB active_file:72224kB inactive_file:160124kB unevictable:1536kB writepending:540kB present:3129332kB managed:2592972kB mlocked:0kB bounce:0kB free_pcp:12276kB local_pcp:11328kB free_cma:0kB [ 402.790516][T10202] lowmem_reserve[]: 0 0 1 1 1 [ 402.796589][T10202] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.838950][T10202] lowmem_reserve[]: 0 0 0 0 0 [ 402.850294][T10202] Node 1 Normal free:3904924kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19196kB local_pcp:10236kB free_cma:0kB [ 402.887097][T10202] lowmem_reserve[]: 0 0 0 0 0 [ 402.892647][T10202] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 402.912268][T10202] Node 0 DMA32: 2132*4kB (UME) 1901*8kB (UME) 854*16kB (UME) 838*32kB (UME) 1062*64kB (UME) 576*128kB (UME) 160*256kB (UME) 76*512kB (UM) 17*1024kB (UM) 7*2048kB (UM) 257*4096kB (UM) = 1370200kB [ 402.939040][T10202] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 402.991274][T10223] netlink: 'syz.1.1971': attribute type 2 has an invalid length. [ 403.032135][T10202] Node 1 Normal: 183*4kB (UME) 66*8kB (UME) 35*16kB (UE) 30*32kB (UME) 19*64kB (UME) 12*128kB (UME) 4*256kB (UM) 2*512kB (ME) 2*1024kB (UE) 2*2048kB (UE) 950*4096kB (M) = 3904924kB [ 403.091337][T10202] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 403.171920][T10202] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 403.181297][T10202] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 403.251811][T10202] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 403.261186][T10202] 59500 total pagecache pages [ 403.327067][T10202] 0 pages in swap cache [ 403.331308][T10202] Free swap = 124996kB [ 403.394833][T10202] Total swap = 124996kB [ 403.409064][T10202] 2097051 pages RAM [ 403.413100][T10202] 0 pages HighMem/MovableOnly [ 403.417819][T10202] 415207 pages reserved [ 403.422080][T10202] 0 pages cma reserved [ 403.457937][T10236] netlink: 'syz.1.1975': attribute type 10 has an invalid length. [ 403.652696][T10242] netlink: 'syz.4.1978': attribute type 10 has an invalid length. [ 403.697584][T10242] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1978'. [ 403.791014][T10246] device sit0 left promiscuous mode [ 404.172274][T10249] device sit0 entered promiscuous mode [ 404.231854][ C1] net_ratelimit: 2085 callbacks suppressed [ 404.231875][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.250178][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:4e:b4:17:73:10, vlan:0) [ 404.262580][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.274948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.287403][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:4e:b4:17:73:10, vlan:0) [ 404.299793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.312163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.324711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:4e:b4:17:73:10, vlan:0) [ 404.337100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.349498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 406.101148][T10291] device sit0 left promiscuous mode [ 406.706689][T10298] device sit0 entered promiscuous mode [ 409.241870][ C1] net_ratelimit: 7737 callbacks suppressed [ 409.241889][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:4e:b4:17:73:10, vlan:0) [ 409.260191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.272577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.285018][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:4e:b4:17:73:10, vlan:0) [ 409.297453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.309867][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.322296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:4e:b4:17:73:10, vlan:0) [ 409.334719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.347092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.359510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:4e:b4:17:73:10, vlan:0) [ 410.147173][T10321] netlink: 'syz.3.2005': attribute type 3 has an invalid length. [ 410.179167][T10322] netlink: 'syz.3.2005': attribute type 3 has an invalid length. [ 410.210631][T10321] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2005'. [ 410.252700][T10322] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2005'. [ 410.770065][T10341] device sit0 left promiscuous mode [ 411.005787][T10342] device sit0 entered promiscuous mode [ 411.727744][T10361] device veth0_to_bridge left promiscuous mode [ 411.745918][T10361] bridge0: port 3(veth0_to_bridge) entered disabled state [ 411.769871][T10361] device bridge_slave_1 left promiscuous mode [ 411.803001][T10361] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.020995][T10361] device bridge_slave_0 left promiscuous mode [ 412.034238][T10361] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.476451][T10373] netlink: 'syz.0.2024': attribute type 10 has an invalid length. [ 412.861535][T10383] netlink: 'syz.0.2029': attribute type 2 has an invalid length. [ 412.882033][T10383] netlink: 'syz.0.2029': attribute type 8 has an invalid length. [ 412.890430][T10383] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2029'. [ 413.438232][T10406] netlink: 'syz.0.2038': attribute type 29 has an invalid length. [ 413.484862][T10406] netlink: 'syz.0.2038': attribute type 29 has an invalid length. [ 413.499604][T10406] netlink: 'syz.0.2038': attribute type 29 has an invalid length. [ 413.510441][T10406] netlink: 'syz.0.2038': attribute type 29 has an invalid length. [ 413.613217][T10413] netlink: 'syz.2.2040': attribute type 10 has an invalid length. [ 413.645220][T10413] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 413.691210][T10417] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2041'. [ 413.774082][T10417] syz_tun: refused to change device tx_queue_len [ 414.891074][T10460] FAULT_INJECTION: forcing a failure. [ 414.891074][T10460] name failslab, interval 1, probability 0, space 0, times 0 [ 414.908920][T10460] CPU: 0 PID: 10460 Comm: syz.4.2058 Not tainted syzkaller #0 [ 414.916466][T10460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 414.926566][T10460] Call Trace: [ 414.929886][T10460] [ 414.932860][T10460] dump_stack_lvl+0x188/0x24e [ 414.937583][T10460] ? show_regs_print_info+0x12/0x12 [ 414.942811][T10460] ? load_image+0x410/0x410 [ 414.947417][T10460] ? __might_sleep+0xd0/0xd0 [ 414.952059][T10460] ? __lock_acquire+0x7bd0/0x7bd0 [ 414.957149][T10460] should_fail_ex+0x390/0x4c0 [ 414.961876][T10460] should_failslab+0x5/0x20 [ 414.966436][T10460] slab_pre_alloc_hook+0x59/0x300 [ 414.971518][T10460] kmem_cache_alloc_node+0x5a/0x310 [ 414.976765][T10460] ? __alloc_skb+0xf9/0x7d0 [ 414.981333][T10460] __alloc_skb+0xf9/0x7d0 [ 414.985829][T10460] netlink_sendmsg+0x654/0xbd0 [ 414.990660][T10460] ? netlink_getsockopt+0x550/0x550 [ 414.995920][T10460] ? aa_sock_msg_perm+0x94/0x150 [ 415.000914][T10460] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 415.006249][T10460] ? security_socket_sendmsg+0x7c/0xa0 [ 415.011758][T10460] ? netlink_getsockopt+0x550/0x550 [ 415.017010][T10460] ____sys_sendmsg+0x5ed/0x9a0 [ 415.021842][T10460] ? __sys_sendmsg_sock+0x30/0x30 [ 415.026914][T10460] ? __import_iovec+0x306/0x510 [ 415.031801][T10460] ? import_iovec+0x6f/0xa0 [ 415.036330][T10460] ___sys_sendmsg+0x2a2/0x360 [ 415.041035][T10460] ? __sys_sendmsg+0x2a0/0x2a0 [ 415.045939][T10460] ? __lock_acquire+0x7bd0/0x7bd0 [ 415.051020][T10460] __se_sys_sendmsg+0x1c3/0x2b0 [ 415.055902][T10460] ? __x64_sys_sendmsg+0x80/0x80 [ 415.060878][T10460] ? lockdep_hardirqs_on+0x94/0x140 [ 415.066115][T10460] do_syscall_64+0x4c/0xa0 [ 415.070556][T10460] ? clear_bhb_loop+0x60/0xb0 [ 415.075253][T10460] ? clear_bhb_loop+0x60/0xb0 [ 415.079954][T10460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.085892][T10460] RIP: 0033:0x7f0301d9de59 [ 415.090326][T10460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.109962][T10460] RSP: 002b:00007f0302cbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.118408][T10460] RAX: ffffffffffffffda RBX: 00007f0302025fa0 RCX: 00007f0301d9de59 [ 415.126415][T10460] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 415.134412][T10460] RBP: 00007f0302cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 415.142405][T10460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.150423][T10460] R13: 00007f0302026038 R14: 00007f0302025fa0 R15: 00007fff17a256d8 [ 415.158431][T10460] [ 415.935004][T10483] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2067'. [ 415.976230][T10486] FAULT_INJECTION: forcing a failure. [ 415.976230][T10486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.020905][T10486] CPU: 1 PID: 10486 Comm: syz.3.2070 Not tainted syzkaller #0 [ 416.028462][T10486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 416.038556][T10486] Call Trace: [ 416.041867][T10486] [ 416.044836][T10486] dump_stack_lvl+0x188/0x24e [ 416.049551][T10486] ? show_regs_print_info+0x12/0x12 [ 416.054789][T10486] ? load_image+0x410/0x410 [ 416.059333][T10486] ? __lock_acquire+0x7bd0/0x7bd0 [ 416.064443][T10486] ? tomoyo_path_number_perm+0x205/0x650 [ 416.070121][T10486] ? tomoyo_path_number_perm+0x5a4/0x650 [ 416.075801][T10486] should_fail_ex+0x390/0x4c0 [ 416.080517][T10486] _copy_from_user+0x2c/0x170 [ 416.085235][T10486] wext_handle_ioctl+0xc4/0x1d0 [ 416.090144][T10486] ? call_commit_handler+0xf0/0xf0 [ 416.095341][T10486] sock_ioctl+0x143/0x700 [ 416.099732][T10486] ? sock_poll+0x420/0x420 [ 416.104193][T10486] ? bpf_lsm_file_ioctl+0x5/0x10 [ 416.109173][T10486] ? security_file_ioctl+0x7c/0xa0 [ 416.114323][T10486] ? sock_poll+0x420/0x420 [ 416.118780][T10486] __se_sys_ioctl+0xfa/0x170 [ 416.123420][T10486] do_syscall_64+0x4c/0xa0 [ 416.127873][T10486] ? clear_bhb_loop+0x60/0xb0 [ 416.132936][T10486] ? clear_bhb_loop+0x60/0xb0 [ 416.137662][T10486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.143635][T10486] RIP: 0033:0x7f1c9cb9de59 [ 416.148085][T10486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.167722][T10486] RSP: 002b:00007f1c9adf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.176174][T10486] RAX: ffffffffffffffda RBX: 00007f1c9ce25fa0 RCX: 00007f1c9cb9de59 [ 416.184175][T10486] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000003 [ 416.192433][T10486] RBP: 00007f1c9adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 416.200460][T10486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.208469][T10486] R13: 00007f1c9ce26038 R14: 00007f1c9ce25fa0 R15: 00007ffd52f3dce8 [ 416.216493][T10486] [ 416.427110][T10493] netlink: 81348 bytes leftover after parsing attributes in process `syz.4.2068'. [ 418.009369][T10519] FAULT_INJECTION: forcing a failure. [ 418.009369][T10519] name failslab, interval 1, probability 0, space 0, times 0 [ 418.057110][T10519] CPU: 1 PID: 10519 Comm: syz.3.2078 Not tainted syzkaller #0 [ 418.064750][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 418.074854][T10519] Call Trace: [ 418.078170][T10519] [ 418.081142][T10519] dump_stack_lvl+0x188/0x24e [ 418.085876][T10519] ? show_regs_print_info+0x12/0x12 [ 418.091122][T10519] ? load_image+0x410/0x410 [ 418.095693][T10519] ? __might_sleep+0xd0/0xd0 [ 418.100339][T10519] ? __lock_acquire+0x7bd0/0x7bd0 [ 418.105419][T10519] ? verify_lock_unused+0x140/0x140 [ 418.110675][T10519] should_fail_ex+0x390/0x4c0 [ 418.115405][T10519] should_failslab+0x5/0x20 [ 418.119956][T10519] slab_pre_alloc_hook+0x59/0x300 [ 418.125030][T10519] ? __get_vm_area_node+0x122/0x330 [ 418.130299][T10519] __kmem_cache_alloc_node+0x4f/0x270 [ 418.135721][T10519] ? __get_vm_area_node+0x122/0x330 [ 418.140965][T10519] kmalloc_node_trace+0x22/0xe0 [ 418.145898][T10519] __get_vm_area_node+0x122/0x330 [ 418.150973][T10519] ? __local_bh_enable_ip+0x136/0x1c0 [ 418.156441][T10519] __vmalloc_node_range+0x357/0x1380 [ 418.161797][T10519] ? netlink_sendmsg+0x5ec/0xbd0 [ 418.166801][T10519] ? netlink_insert+0x28d/0x13b0 [ 418.171796][T10519] ? free_vm_area+0x50/0x50 [ 418.176365][T10519] ? netlink_sendmsg+0x5ec/0xbd0 [ 418.181348][T10519] vmalloc+0x75/0x80 [ 418.185301][T10519] ? netlink_sendmsg+0x5ec/0xbd0 [ 418.190284][T10519] netlink_sendmsg+0x5ec/0xbd0 [ 418.195120][T10519] ? netlink_getsockopt+0x550/0x550 [ 418.200383][T10519] ? aa_file_perm+0x3ea/0xf00 [ 418.205108][T10519] ? aa_file_perm+0x112/0xf00 [ 418.210006][T10519] ? aa_sock_msg_perm+0x94/0x150 [ 418.214997][T10519] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 418.220332][T10519] ? security_socket_sendmsg+0x7c/0xa0 [ 418.225843][T10519] sock_write_iter+0x2d5/0x3e0 [ 418.230666][T10519] ? sock_read_iter+0x3a0/0x3a0 [ 418.235632][T10519] ? common_file_perm+0x171/0x1c0 [ 418.240707][T10519] vfs_write+0x482/0x9a0 [ 418.245018][T10519] ? file_end_write+0x250/0x250 [ 418.249932][T10519] ? __fget_files+0x3fc/0x460 [ 418.254675][T10519] ? __fdget_pos+0x1d4/0x360 [ 418.259322][T10519] ? ksys_write+0x70/0x260 [ 418.263791][T10519] ksys_write+0x14d/0x260 [ 418.268181][T10519] ? __ia32_sys_read+0x80/0x80 [ 418.273004][T10519] ? lockdep_hardirqs_on+0x94/0x140 [ 418.278297][T10519] do_syscall_64+0x4c/0xa0 [ 418.282759][T10519] ? clear_bhb_loop+0x60/0xb0 [ 418.287478][T10519] ? clear_bhb_loop+0x60/0xb0 [ 418.292207][T10519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.298158][T10519] RIP: 0033:0x7f1c9cb9de59 [ 418.302618][T10519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.322367][T10519] RSP: 002b:00007f1c9adf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 418.330830][T10519] RAX: ffffffffffffffda RBX: 00007f1c9ce25fa0 RCX: 00007f1c9cb9de59 [ 418.338849][T10519] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 418.346868][T10519] RBP: 00007f1c9adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 418.354882][T10519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.362900][T10519] R13: 00007f1c9ce26038 R14: 00007f1c9ce25fa0 R15: 00007ffd52f3dce8 [ 418.370924][T10519] [ 418.906589][T10519] syz.3.2078: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 418.945211][T10519] CPU: 1 PID: 10519 Comm: syz.3.2078 Not tainted syzkaller #0 [ 418.952761][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 418.962864][T10519] Call Trace: [ 418.966187][T10519] [ 418.969159][T10519] dump_stack_lvl+0x188/0x24e [ 418.973882][T10519] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 418.980347][T10519] ? show_regs_print_info+0x12/0x12 [ 418.985630][T10519] ? load_image+0x410/0x410 [ 418.990195][T10519] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 418.996659][T10519] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 419.003218][T10519] warn_alloc+0x242/0x330 [ 419.007604][T10519] ? __get_vm_area_node+0x122/0x330 [ 419.012869][T10519] ? zone_watermark_ok_safe+0x270/0x270 [ 419.018470][T10519] ? rcu_is_watching+0x11/0xa0 [ 419.023383][T10519] ? __get_vm_area_node+0x318/0x330 [ 419.028634][T10519] ? __local_bh_enable_ip+0x136/0x1c0 [ 419.034063][T10519] __vmalloc_node_range+0x37c/0x1380 [ 419.039418][T10519] ? netlink_insert+0x28d/0x13b0 [ 419.044418][T10519] ? free_vm_area+0x50/0x50 [ 419.048984][T10519] ? netlink_sendmsg+0x5ec/0xbd0 [ 419.053973][T10519] vmalloc+0x75/0x80 [ 419.057916][T10519] ? netlink_sendmsg+0x5ec/0xbd0 [ 419.062924][T10519] netlink_sendmsg+0x5ec/0xbd0 [ 419.067743][T10519] ? netlink_getsockopt+0x550/0x550 [ 419.072989][T10519] ? aa_file_perm+0x3ea/0xf00 [ 419.077709][T10519] ? aa_file_perm+0x112/0xf00 [ 419.082427][T10519] ? aa_sock_msg_perm+0x94/0x150 [ 419.087452][T10519] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 419.092782][T10519] ? security_socket_sendmsg+0x7c/0xa0 [ 419.098292][T10519] sock_write_iter+0x2d5/0x3e0 [ 419.103109][T10519] ? sock_read_iter+0x3a0/0x3a0 [ 419.108019][T10519] ? common_file_perm+0x171/0x1c0 [ 419.113100][T10519] vfs_write+0x482/0x9a0 [ 419.117407][T10519] ? file_end_write+0x250/0x250 [ 419.122325][T10519] ? __fget_files+0x3fc/0x460 [ 419.127069][T10519] ? __fdget_pos+0x1d4/0x360 [ 419.131717][T10519] ? ksys_write+0x70/0x260 [ 419.136377][T10519] ksys_write+0x14d/0x260 [ 419.140777][T10519] ? __ia32_sys_read+0x80/0x80 [ 419.145611][T10519] ? lockdep_hardirqs_on+0x94/0x140 [ 419.150869][T10519] do_syscall_64+0x4c/0xa0 [ 419.155352][T10519] ? clear_bhb_loop+0x60/0xb0 [ 419.160072][T10519] ? clear_bhb_loop+0x60/0xb0 [ 419.164801][T10519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.170753][T10519] RIP: 0033:0x7f1c9cb9de59 [ 419.175216][T10519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.194872][T10519] RSP: 002b:00007f1c9adf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 419.203341][T10519] RAX: ffffffffffffffda RBX: 00007f1c9ce25fa0 RCX: 00007f1c9cb9de59 [ 419.211355][T10519] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 419.219378][T10519] RBP: 00007f1c9adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 419.227407][T10519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.235434][T10519] R13: 00007f1c9ce26038 R14: 00007f1c9ce25fa0 R15: 00007ffd52f3dce8 [ 419.243462][T10519] [ 419.264225][T10519] Mem-Info: [ 419.267570][T10519] active_anon:15063 inactive_anon:0 isolated_anon:0 [ 419.267570][T10519] active_file:18104 inactive_file:40089 isolated_file:0 [ 419.267570][T10519] unevictable:768 dirty:233 writeback:0 [ 419.267570][T10519] slab_reclaimable:20831 slab_unreclaimable:94677 [ 419.267570][T10519] mapped:39225 shmem:9298 pagetables:687 [ 419.267570][T10519] sec_pagetables:0 bounce:0 [ 419.267570][T10519] kernel_misc_reclaimable:0 [ 419.267570][T10519] free:1311166 free_pcp:11948 free_cma:0 [ 419.328049][T10519] Node 0 active_anon:60652kB inactive_anon:0kB active_file:72416kB inactive_file:160148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157200kB dirty:932kB writeback:0kB shmem:35956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11212kB pagetables:2748kB sec_pagetables:0kB all_unreclaimable? no [ 419.368910][T10519] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 419.424640][T10519] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 419.488470][T10519] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 419.503073][T10519] Node 0 DMA32 free:1321604kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:62652kB inactive_anon:0kB active_file:72416kB inactive_file:160148kB unevictable:1536kB writepending:932kB present:3129332kB managed:2592972kB mlocked:0kB bounce:0kB free_pcp:29856kB local_pcp:11868kB free_cma:0kB [ 419.570460][T10519] lowmem_reserve[]: 0 0 1 1 1 [ 419.598756][T10519] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 419.688818][T10519] lowmem_reserve[]: 0 0 0 0 0 [ 419.698959][T10519] Node 1 Normal free:3904924kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19196kB local_pcp:10236kB free_cma:0kB [ 419.743893][T10526] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2080'. [ 419.804840][T10519] lowmem_reserve[]: 0 0 0 0 0 [ 419.809684][T10519] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 419.862487][T10519] Node 0 DMA32: 584*4kB (UM) 595*8kB (UME) 212*16kB (UE) 47*32kB (U) 1062*64kB (UME) 577*128kB (UME) 160*256kB (UME) 76*512kB (UM) 17*1024kB (UM) 7*2048kB (UM) 257*4096kB (UM) = 1318104kB [ 419.950839][T10519] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 420.002625][T10519] Node 1 Normal: 183*4kB (UME) 66*8kB (UME) 35*16kB (UE) 30*32kB (UME) 19*64kB (UME) 12*128kB (UME) 4*256kB (UM) 2*512kB (ME) 2*1024kB (UE) 2*2048kB (UE) 950*4096kB (M) = 3904924kB [ 420.072208][T10519] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 420.137758][T10519] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 420.178263][T10519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 420.232973][T10519] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 420.292883][T10519] 69508 total pagecache pages [ 420.327356][T10519] 0 pages in swap cache [ 420.354287][T10519] Free swap = 124996kB [ 420.381260][T10519] Total swap = 124996kB [ 420.408722][T10519] 2097051 pages RAM [ 420.437301][T10519] 0 pages HighMem/MovableOnly [ 420.476379][T10519] 415207 pages reserved [ 420.503941][T10519] 0 pages cma reserved [ 421.213164][T10555] C: renamed from team_slave_0 [ 421.260806][T10555] validate_nla: 2 callbacks suppressed [ 421.260827][T10555] netlink: 'syz.4.2088': attribute type 1 has an invalid length. [ 421.342265][T10555] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2088'. [ 421.430902][T10555] net_ratelimit: 4165 callbacks suppressed [ 421.430925][T10555] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 421.920338][T10566] FAULT_INJECTION: forcing a failure. [ 421.920338][T10566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.091875][T10566] CPU: 1 PID: 10566 Comm: syz.2.2094 Not tainted syzkaller #0 [ 422.099428][T10566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 422.109533][T10566] Call Trace: [ 422.112844][T10566] [ 422.115833][T10566] dump_stack_lvl+0x188/0x24e [ 422.120548][T10566] ? show_regs_print_info+0x12/0x12 [ 422.125780][T10566] ? load_image+0x410/0x410 [ 422.130317][T10566] ? __lock_acquire+0x7bd0/0x7bd0 [ 422.135382][T10566] should_fail_ex+0x390/0x4c0 [ 422.140094][T10566] _copy_from_iter+0x1c0/0x1130 [ 422.144974][T10566] ? __lock_acquire+0x7bd0/0x7bd0 [ 422.150035][T10566] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 422.155447][T10566] ? copyout_mc+0x110/0x110 [ 422.160024][T10566] ? __virt_addr_valid+0x188/0x540 [ 422.165173][T10566] ? __virt_addr_valid+0x188/0x540 [ 422.170322][T10566] ? __virt_addr_valid+0x467/0x540 [ 422.175476][T10566] ? __check_object_size+0x4f6/0xa70 [ 422.180795][T10566] skb_copy_datagram_from_iter+0xee/0x6b0 [ 422.186555][T10566] ? skb_put+0x10e/0x200 [ 422.190829][T10566] tun_get_user+0xc41/0x3c20 [ 422.195467][T10566] ? rcu_read_unlock+0xa0/0xa0 [ 422.200263][T10566] ? tun_get+0x1c/0x2e0 [ 422.204447][T10566] ? __lock_acquire+0x7bd0/0x7bd0 [ 422.209517][T10566] ? tun_get+0x1c/0x2e0 [ 422.213732][T10566] tun_chr_write_iter+0x112/0x1f0 [ 422.218788][T10566] vfs_write+0x482/0x9a0 [ 422.223068][T10566] ? file_end_write+0x250/0x250 [ 422.227957][T10566] ? __fget_files+0x3fc/0x460 [ 422.232675][T10566] ? __fdget_pos+0x1d4/0x360 [ 422.237302][T10566] ? ksys_write+0x70/0x260 [ 422.241762][T10566] ksys_write+0x14d/0x260 [ 422.246127][T10566] ? __ia32_sys_read+0x80/0x80 [ 422.250924][T10566] ? lockdep_hardirqs_on+0x94/0x140 [ 422.256155][T10566] do_syscall_64+0x4c/0xa0 [ 422.260595][T10566] ? clear_bhb_loop+0x60/0xb0 [ 422.265303][T10566] ? clear_bhb_loop+0x60/0xb0 [ 422.270005][T10566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.275943][T10566] RIP: 0033:0x7fa699f9de59 [ 422.280383][T10566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.300020][T10566] RSP: 002b:00007fa69ae22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 422.308463][T10566] RAX: ffffffffffffffda RBX: 00007fa69a225fa0 RCX: 00007fa699f9de59 [ 422.316465][T10566] RDX: 000000000000fdef RSI: 0000200000000600 RDI: 00000000000000c8 [ 422.324464][T10566] RBP: 00007fa69ae22090 R08: 0000000000000000 R09: 0000000000000000 [ 422.332469][T10566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.340470][T10566] R13: 00007fa69a226038 R14: 00007fa69a225fa0 R15: 00007ffccda65828 [ 422.348482][T10566] [ 422.599314][T10572] device sit0 left promiscuous mode [ 422.720269][T10576] device sit0 entered promiscuous mode [ 423.211624][T10575] netlink: 'syz.3.2096': attribute type 10 has an invalid length. [ 423.785826][T10594] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0300:0000:ac14:140a with DS=0x31 [ 425.996434][T10633] netlink: 'syz.2.2110': attribute type 10 has an invalid length. [ 426.019084][T10641] device sit0 left promiscuous mode [ 426.163263][T10643] device sit0 entered promiscuous mode [ 426.552985][T10649] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2115'. [ 426.627186][T10648] delete_channel: no stack [ 427.608742][T10663] netlink: 'syz.0.2120': attribute type 4 has an invalid length. [ 427.647589][T10663] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2120'. [ 427.671900][T10663] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 429.410108][T10709] netlink: 'syz.0.2137': attribute type 10 has an invalid length. [ 429.491611][T10715] netlink: 'syz.2.2141': attribute type 10 has an invalid length. [ 429.507752][T10715] device veth1_macvtap left promiscuous mode [ 429.645272][T10717] netlink: 'syz.4.2142': attribute type 10 has an invalid length. [ 429.743754][T10717] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 429.972528][T10726] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2146'. [ 431.657471][T10743] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2152'. [ 431.686312][T10743] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 431.703439][T10743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.730319][T10748] netlink: 'syz.1.2154': attribute type 10 has an invalid length. [ 432.064099][T10762] device sit0 left promiscuous mode [ 432.366450][T10763] device sit0 entered promiscuous mode [ 432.560981][T10774] netlink: 'syz.3.2162': attribute type 4 has an invalid length. [ 432.611978][T10774] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2162'. [ 432.647295][T10774] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 433.966557][T10812] device sit0 left promiscuous mode [ 434.265772][T10815] device sit0 entered promiscuous mode [ 434.346904][T10827] netlink: 'syz.4.2178': attribute type 2 has an invalid length. [ 434.379307][T10816] device sit0 left promiscuous mode [ 434.509005][T10820] device sit0 entered promiscuous mode [ 434.743561][T10835] netlink: 'syz.0.2179': attribute type 10 has an invalid length. [ 435.084074][T10839] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2181'. [ 435.959371][T10869] netlink: 'syz.1.2191': attribute type 21 has an invalid length. [ 435.972385][T10869] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2191'. [ 436.180041][T10871] netlink: 'syz.0.2192': attribute type 21 has an invalid length. [ 436.199443][T10871] netlink: 'syz.0.2192': attribute type 1 has an invalid length. [ 436.238382][T10871] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2192'. [ 436.307957][T10878] netlink: 'syz.2.2195': attribute type 10 has an invalid length. [ 436.326856][T10878] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2195'. [ 436.372168][T10878] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 436.566659][T10871] can: request_module (can-proto-0) failed. [ 437.050964][T10901] netlink: 'syz.4.2201': attribute type 2 has an invalid length. [ 437.460402][T10910] netlink: 'syz.3.2206': attribute type 4 has an invalid length. [ 437.478664][T10910] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2206'. [ 437.500484][T10910] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 437.570378][T10924] netlink: 'syz.1.2210': attribute type 1 has an invalid length. [ 437.581658][T10924] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.2210'. [ 437.903234][T10923] delete_channel: no stack [ 440.055115][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.061540][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.494225][T10939] netlink: 'syz.3.2213': attribute type 1 has an invalid length. [ 441.073111][T10956] device sit0 left promiscuous mode [ 441.472854][T10963] device sit0 entered promiscuous mode [ 441.552925][T10969] netlink: 'syz.2.2222': attribute type 4 has an invalid length. [ 441.561559][T10969] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2222'. [ 441.576895][T10969] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 441.622354][T10978] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0300:0000:ac14:140a with DS=0x31 [ 442.206938][T10995] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2231'. [ 442.356904][T10999] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2232'. [ 442.412739][T10998] delete_channel: no stack [ 442.884877][T11017] device sit0 left promiscuous mode [ 443.248794][T11020] device sit0 entered promiscuous mode [ 443.346525][T11019] netlink: 'syz.0.2239': attribute type 4 has an invalid length. [ 443.371853][T11019] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2239'. [ 443.412079][T11019] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 444.890908][T11067] device sit0 left promiscuous mode [ 445.511196][T11071] device sit0 entered promiscuous mode [ 445.697260][T11069] netlink: 'syz.3.2258': attribute type 4 has an invalid length. [ 445.716491][T11069] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2258'. [ 445.756441][T11069] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 446.602877][T11099] netlink: 'syz.3.2268': attribute type 10 has an invalid length. [ 446.693049][T11099] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 446.820299][T11101] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.2269'. [ 446.850610][T11102] netlink: 'syz.4.2269': attribute type 16 has an invalid length. [ 446.931943][T11101] openvswitch: netlink: Key type 386 is out of range max 32 [ 446.941036][T11102] netlink: 'syz.4.2269': attribute type 3 has an invalid length. [ 447.022281][T11102] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2269'. [ 447.265834][T11115] FAULT_INJECTION: forcing a failure. [ 447.265834][T11115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.300039][T11115] CPU: 0 PID: 11115 Comm: syz.2.2274 Not tainted syzkaller #0 [ 447.307588][T11115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 447.317696][T11115] Call Trace: [ 447.321018][T11115] [ 447.323989][T11115] dump_stack_lvl+0x188/0x24e [ 447.329157][T11115] ? show_regs_print_info+0x12/0x12 [ 447.334400][T11115] ? load_image+0x410/0x410 [ 447.338954][T11115] ? __lock_acquire+0x7bd0/0x7bd0 [ 447.344038][T11115] should_fail_ex+0x390/0x4c0 [ 447.348757][T11115] _copy_from_user+0x2c/0x170 [ 447.353488][T11115] __sys_bpf+0x2ea/0x780 [ 447.357786][T11115] ? bpf_link_show_fdinfo+0x380/0x380 [ 447.363232][T11115] ? lock_chain_count+0x20/0x20 [ 447.368145][T11115] __x64_sys_bpf+0x78/0x90 [ 447.372616][T11115] do_syscall_64+0x4c/0xa0 [ 447.377069][T11115] ? clear_bhb_loop+0x60/0xb0 [ 447.381788][T11115] ? clear_bhb_loop+0x60/0xb0 [ 447.386505][T11115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.392474][T11115] RIP: 0033:0x7fa699f9de59 [ 447.396934][T11115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.416694][T11115] RSP: 002b:00007fa69ae22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 447.425160][T11115] RAX: ffffffffffffffda RBX: 00007fa69a225fa0 RCX: 00007fa699f9de59 [ 447.433188][T11115] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 447.441200][T11115] RBP: 00007fa69ae22090 R08: 0000000000000000 R09: 0000000000000000 [ 447.449211][T11115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.457222][T11115] R13: 00007fa69a226038 R14: 00007fa69a225fa0 R15: 00007ffccda65828 [ 447.465244][T11115] [ 447.523058][T11114] device sit0 left promiscuous mode [ 447.978904][T11118] device sit0 entered promiscuous mode [ 448.542228][T11120] device sit0 left promiscuous mode [ 448.831560][T11126] device sit0 entered promiscuous mode [ 449.395206][T11154] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2283'. [ 449.635734][T11156] netlink: 'syz.1.2287': attribute type 4 has an invalid length. [ 449.672515][T11156] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2287'. [ 449.720789][T11156] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 451.414028][T11176] device sit0 left promiscuous mode [ 451.655385][T11181] device sit0 entered promiscuous mode [ 451.802765][T11190] netlink: 'syz.4.2297': attribute type 10 has an invalid length. [ 454.028301][T11204] netlink: 'syz.0.2303': attribute type 4 has an invalid length. [ 454.060919][T11204] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2303'. [ 454.088513][T11204] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 454.150318][T11211] netlink: 'syz.1.2305': attribute type 10 has an invalid length. [ 454.176604][T11211] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2305'. [ 454.217628][T11211] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 454.531257][T11215] netlink: 'syz.2.2307': attribute type 10 has an invalid length. [ 454.572697][T11215] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 455.235234][T11224] device sit0 left promiscuous mode [ 456.228351][T11219] device sit0 entered promiscuous mode [ 456.525305][T11235] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2313'. [ 457.172235][T11259] netlink: 'syz.1.2324': attribute type 1 has an invalid length. [ 457.199114][T11259] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2324'. [ 457.237150][T11259] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 457.767775][T11262] device sit0 left promiscuous mode [ 458.125605][T11266] device sit0 entered promiscuous mode [ 459.155979][T11291] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2335'. [ 459.365011][T11297] netlink: 'syz.3.2338': attribute type 10 has an invalid length. [ 459.400202][T11297] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 459.525653][T11289] netlink: 'syz.0.2336': attribute type 4 has an invalid length. [ 459.620695][T11289] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2336'. [ 459.670003][T11289] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 459.751002][T11301] netlink: 'syz.4.2340': attribute type 4 has an invalid length. [ 459.778745][T11301] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2340'. [ 459.850968][T11301] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 459.921333][T11308] netlink: 'syz.3.2342': attribute type 3 has an invalid length. [ 459.960812][T11308] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2342'. [ 460.718541][T11319] device sit0 left promiscuous mode [ 460.834922][T11322] device sit0 entered promiscuous mode [ 460.979461][T11335] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2351'. [ 461.305359][T11336] netlink: 'syz.3.2351': attribute type 29 has an invalid length. [ 462.519002][T11335] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 462.528863][T11335] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 462.539015][T11336] netlink: 'syz.3.2351': attribute type 29 has an invalid length. [ 462.552249][T11335] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 463.008591][T11350] netlink: 'syz.1.2355': attribute type 4 has an invalid length. [ 463.031572][T11350] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2355'. [ 463.078339][T11350] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 463.143418][T11344] netlink: 'syz.2.2354': attribute type 4 has an invalid length. [ 463.294013][T11344] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2354'. [ 463.322657][T11358] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2358'. [ 463.345250][T11344] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 490.601927][ T4367] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2681 jiffies s: 29605 root: 0x2/. [ 490.626530][ T4367] rcu: blocking rcu_node structures (internal RCU debug): [ 490.640579][ T4367] Sending NMI from CPU 0 to CPUs 1: [ 490.646030][ C1] NMI backtrace for cpu 1 [ 490.646041][ C1] CPU: 1 PID: 11370 Comm: syz.1.2362 Not tainted syzkaller #0 [ 490.646059][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 490.646070][ C1] RIP: 0010:check_preemption_disabled+0x1/0x110 [ 490.646101][ C1] Code: 80 a1 bc 8c 4c 89 f6 e8 6d b8 0c fa e9 6e ff ff ff 00 00 cc cc 00 00 cc cc 48 c7 c7 40 e1 de 8a 48 c7 c6 80 e1 de 8a eb 00 55 <41> 57 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 [ 490.646116][ C1] RSP: 0018:ffffc900001e0918 EFLAGS: 00000002 [ 490.646131][ C1] RAX: 4000000000000002 RBX: ffff8880b8f35800 RCX: 0cc068f558ef6d00 [ 490.646145][ C1] RDX: 0000000000000100 RSI: ffffffff8a94e180 RDI: ffffffff8adee1a0 [ 490.646157][ C1] RBP: ffffc900001e09e8 R08: ffffffff8e200f6f R09: 1ffffffff1c401ed [ 490.646170][ C1] R10: dffffc0000000000 R11: fffffbfff1c401ee R12: dffffc0000000000 [ 490.646183][ C1] R13: 0000000000000001 R14: 4000000000000002 R15: 0000000000000000 [ 490.646195][ C1] FS: 00007fca34ced6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 490.646211][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 490.646223][ C1] CR2: 00007fa69a227dac CR3: 000000004535b000 CR4: 00000000003506e0 [ 490.646235][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 490.646247][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 490.646258][ C1] Call Trace: [ 490.646263][ C1] [ 490.646269][ C1] ct_nmi_exit+0x100/0x1c0 [ 490.646293][ C1] ct_irq_exit_irqson+0xaf/0x170 [ 490.646312][ C1] ? ct_irq_enter_irqson+0x170/0x170 [ 490.646331][ C1] ? __irq_exit_rcu+0x147/0x230 [ 490.646348][ C1] ? irq_exit_rcu+0x20/0x20 [ 490.646366][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 490.646399][ C1] trace_irq_enable_rcuidle+0xd8/0x140 [ 490.646425][ C1] trace_hardirqs_on+0x24/0x40 [ 490.646447][ C1] asm_sysvec_irq_work+0x16/0x20 [ 490.646472][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 490.646492][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 e2 82 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 490.646506][ C1] RSP: 0018:ffffc900001e0ae0 EFLAGS: 00000206 [ 490.646519][ C1] RAX: 0cc068f558ef6d00 RBX: 1ffff9200003c164 RCX: 0cc068f558ef6d00 [ 490.646532][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adee1a0 [ 490.646545][ C1] RBP: ffffc900001e0bd0 R08: ffffffff90af2247 R09: 1ffffffff215e448 [ 490.646558][ C1] R10: dffffc0000000000 R11: fffffbfff215e449 R12: 0000000000000246 [ 490.646575][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 490.646596][ C1] ? kmem_cache_free+0x80/0x2a0 [ 490.646618][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 490.646641][ C1] __rcu_read_unlock+0x78/0xd0 [ 490.646657][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 490.646677][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 490.646699][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 490.646725][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 490.646746][ C1] __hrtimer_run_queues+0x522/0xc90 [ 490.646770][ C1] ? hw_scan_work+0xf00/0xf00 [ 490.646792][ C1] ? hrtimer_interrupt+0x980/0x980 [ 490.646816][ C1] hrtimer_run_softirq+0x173/0x290 [ 490.646838][ C1] handle_softirqs+0x291/0x910 [ 490.646858][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 490.646876][ C1] ? do_softirq+0x210/0x210 [ 490.646890][ C1] ? hrtimer_interrupt+0x775/0x980 [ 490.646911][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 490.646929][ C1] __irq_exit_rcu+0x13b/0x230 [ 490.646945][ C1] ? irq_exit_rcu+0x20/0x20 [ 490.646967][ C1] irq_exit_rcu+0x5/0x20 [ 490.646981][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 490.647004][ C1] [ 490.647008][ C1] [ 490.647013][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 490.647040][ C1] RIP: 0010:__text_poke+0x6ac/0x840 [ 490.647062][ C1] Code: 84 24 80 00 00 00 f7 84 24 80 00 00 00 00 02 00 00 c6 44 03 04 f8 75 75 41 f7 c6 00 02 00 00 74 01 fb 48 8b bc 24 c0 00 00 00 7f 5a 06 09 48 b8 00 00 00 00 00 fc ff df c6 44 03 0c f8 48 c7 [ 490.647075][ C1] RSP: 0018:ffffc900034ff5a0 EFLAGS: 00000206 [ 490.647088][ C1] RAX: dffffc0000000000 RBX: 1ffff9200069fec0 RCX: 0cc068f558ef6d00 [ 490.647102][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffff888017466060 [ 490.647115][ C1] RBP: ffffc900034ff6e0 R08: ffffffff90af2247 R09: 1ffffffff215e448 [ 490.647127][ C1] R10: dffffc0000000000 R11: fffffbfff215e449 R12: 00002aaaaaaac000 [ 490.647140][ C1] R13: ffff888025d13c00 R14: 0000000000000282 R15: ffffffffa00024c0 [ 490.647164][ C1] ? __text_poke+0x840/0x840 [ 490.647187][ C1] ? text_poke+0x90/0x90 [ 490.647211][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 490.647239][ C1] text_poke_copy+0x67/0x90 [ 490.647262][ C1] bpf_arch_text_copy+0x21/0x40 [ 490.647279][ C1] bpf_jit_binary_pack_finalize+0x37/0x90 [ 490.647298][ C1] bpf_int_jit_compile+0xbf20/0xcb70 [ 490.647340][ C1] ? emit_bpf_dispatcher+0x1060/0x1060 [ 490.647376][ C1] ? seqcount_lockdep_reader_access+0x196/0x1d0 [ 490.647400][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 490.647422][ C1] ? should_fail_usercopy+0x5/0x20 [ 490.647444][ C1] bpf_prog_select_runtime+0x48b/0x7d0 [ 490.647461][ C1] ? bpf_obj_name_cpy+0x190/0x1d0 [ 490.647485][ C1] bpf_prog_load+0x1039/0x1530 [ 490.647516][ C1] ? map_freeze+0x390/0x390 [ 490.647540][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 490.647567][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 490.647597][ C1] ? security_bpf+0x40/0xa0 [ 490.647615][ C1] ? security_bpf+0x7a/0xa0 [ 490.647634][ C1] __sys_bpf+0x5b8/0x780 [ 490.647658][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 490.647689][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 490.647729][ C1] __x64_sys_bpf+0x78/0x90 [ 490.647752][ C1] do_syscall_64+0x4c/0xa0 [ 490.647769][ C1] ? clear_bhb_loop+0x60/0xb0 [ 490.647784][ C1] ? clear_bhb_loop+0x60/0xb0 [ 490.647800][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.647825][ C1] RIP: 0033:0x7fca33d9de59 [ 490.647839][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.647852][ C1] RSP: 002b:00007fca34ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 490.647868][ C1] RAX: ffffffffffffffda RBX: 00007fca34025fa0 RCX: 00007fca33d9de59 [ 490.647881][ C1] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 490.647892][ C1] RBP: 00007fca33e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 490.647903][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.647913][ C1] R13: 00007fca34026038 R14: 00007fca34025fa0 R15: 00007ffd9f3a4b18 [ 490.647934][ C1]